CVE-2019-3641

Published: Nov 13, 2019Modified: Jun 17, 2026

4.5

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N

Exploitability: 0.9 / Impact: 3.6

Source: NVD

Description

Abuse of Authorization vulnerability in APIs exposed by TIE server in McAfee Threat Intelligence Exchange Server (TIE Server) 3.0.0 allows remote authenticated users to modify stored reputation data via specially crafted messages.

Affected (1)

Products: Mcafee: Threat Intelligence Exchange Server

Mcafee

1 product

Threat Intelligence Exchange Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mcafee Threat Intelligence Exchange Server	Version 3.0.0

Related CWEs

CWE-285

Improper Authorization

The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

References (2)

https://kc.mcafee.com/corporate/index?page=content&id=SB10303

Source: trellixpsirt@trellix.com

https://kc.mcafee.com/corporate/index?page=content&id=SB10303

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.