PT-2019-4419
CVE-2019-3641
·
تاريخ النشر
2019-11-12
·
تاريخ التحديث
2020-10-16
الوصف من
CVSS 3.1
4.5
متوسطةالمقاييسAV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
McAfee Threat Intelligence Exchange Server (TIE Server) version 3.0.0
Description
The issue concerns an Abuse of Authorization vulnerability in APIs exposed by the TIE server, related to weaknesses in the authentication procedure. This allows remote authenticated users to modify stored reputation data via specially crafted messages, potentially impacting the integrity of protected information.
Recommendations
For McAfee Threat Intelligence Exchange Server (TIE Server) version 3.0.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾