CVE-2019-3612

Published: Apr 10, 2019Modified: Jun 17, 2026

4.4

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Exploitability: 0.8 / Impact: 3.6

Source: NVD

Description

Information Disclosure vulnerability in McAfee DXL Platform and TIE Server in DXL prior to 5.0.1 HF2 and TIE prior to 2.3.1 HF1 allows Authenticated users to view sensitive information in plain text via the GUI or command line.

Affected (3)

Products: Mcafee: Data Exchange Layer, Threat Intelligence Exchange

Mcafee

2 products

Data Exchange Layer

Threat Intelligence Exchange

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Mcafee Data Exchange Layer	From 4.0.0 to 4.1.2
Mcafee Data Exchange Layer	From 5.0.0 to 5.0.1
Mcafee Threat Intelligence Exchange	From 2.0.0 to 2.3.1

Related CWEs

CWE-312

Cleartext Storage of Sensitive Information

The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

References (2)

https://kc.mcafee.com/corporate/index?page=content&id=SB10279

Source: trellixpsirt@trellix.com

https://kc.mcafee.com/corporate/index?page=content&id=SB10279

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.