PT-2015-7487 · Mcafee · Threat Intelligence Exchange

Publicado 2015-09-18 · Atualizado 2015-09-22 · CVE-2015-7238

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Threat Intelligence Exchange (TIE) versions prior to 1.2.0

Description The issue concerns weak permissions set for configuration files and installation logs in the Secondary server of Threat Intelligence Exchange (TIE). This weakness allows local users to access sensitive information by reading these files.

Recommendations For versions prior to 1.2.0, update to version 1.2.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the configuration files and installation logs to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2015-7238

Produtos afetados

Threat Intelligence Exchange

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2015-7238 · Nota de Segurança
• https://kc.mcafee.com/corporate/index?page=content&id=SB10132 · Aviso do Fabricante