What is CVE-2019-3641?

CVE-2019-3641 is a medium-severity vulnerability in Mcafee Threat Intelligence Exchange Server, classified under Improper Authorization. CVSS score: 4.5/10. Published 2019-11-13.

How severe is CVE-2019-3641?

Medium severity. CVSS v3 base score is 4.5 out of 10.

Auth bypass in Mcafee Threat Intelligence Exchange Server

CVE-2019-3641

Abuse of Authorization vulnerability in APIs exposed by TIE server in McAfee Threat Intelligence Exchange Server (TIE Server) 3.0.0 allows remote authenticated users to modify stored reputation data via specially crafted messages.

EPSS: 0.007 (52.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N.

Affected products

Mcafee Threat_intelligence_exchange_server — versions 3.0.0
Mcafee,llc Threat Intelligence Exchange Server (Tie Server) — versions 3.0.x 3.0.0

Weakness classification (CWE)

CWE-285 — Improper Authorization

References

trellixpsirt@trellix.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2019-3641?: CVE-2019-3641 is a medium-severity vulnerability in Mcafee Threat Intelligence Exchange Server, classified under Improper Authorization. CVSS score: 4.5/10. Published 2019-11-13.
How severe is CVE-2019-3641?: Medium severity. CVSS v3 base score is 4.5 out of 10.