PT-2019-4419 · Mcafee · Mcafee Threat Intelligence Exchange Server

Publicado 2019-11-12 · Atualizado 2020-10-16 · CVE-2019-3641

Positive Technologies (AI Summary)

CVSS v3.1

4.5

Média

Vetor base

AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions McAfee Threat Intelligence Exchange Server (TIE Server) version 3.0.0

Description The issue concerns an Abuse of Authorization vulnerability in APIs exposed by the TIE server, related to weaknesses in the authentication procedure. This allows remote authenticated users to modify stored reputation data via specially crafted messages, potentially impacting the integrity of protected information.

Recommendations For McAfee Threat Intelligence Exchange Server (TIE Server) version 3.0.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authorization

Improper Authentication

Enumeração de Fraquezas

CWE-285

CWE-287

Identificadores relacionados

BDU:2020-00162

CVE-2019-3641

Produtos afetados

Mcafee Threat Intelligence Exchange Server

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2019-3641 · Nota de Segurança
• https://kc.mcafee.com/corporate/index?page=content&id=SB10303 · Nota
• https://osv.dev/vulnerability/CVE-2019-3641 · Aviso do Fabricante
• https://kc.mcafee.com/corporate/index?page=content&id=SB10303 · Nota
• https://bdu.fstec.ru/vul/2020-00162 · Nota de Segurança