PT-2019-4419

CVE-2019-3641

·

Published

2019-11-12

·

Updated

2020-10-16

Description by

CVSS 3.1
4.5
Medium
MetricsAV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions McAfee Threat Intelligence Exchange Server (TIE Server) version 3.0.0
Description The issue concerns an Abuse of Authorization vulnerability in APIs exposed by the TIE server, related to weaknesses in the authentication procedure. This allows remote authenticated users to modify stored reputation data via specially crafted messages, potentially impacting the integrity of protected information.
Recommendations For McAfee Threat Intelligence Exchange Server (TIE Server) version 3.0.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾