VULNERABILITY INTELLIGENCE

CVE-2019-3641

CVSS score4.5 MEDIUM
EPSS probability0.75%
CISA KEVNot currently listed
Published2019-11-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N

Description

Abuse of Authorization vulnerability in APIs exposed by TIE server in McAfee Threat Intelligence Exchange Server (TIE Server) 3.0.0 allows remote authenticated users to modify stored reputation data via specially crafted messages.

Weakness classification

  • trellixpsirt@trellix.com: CWE-285
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references