What is CVE-2019-3641?

CVE-2019-3641 is a medium-severity vulnerability in Mcafee Threat_intelligence_exchange_server, classified under Improper Authorization. CVSS score: 4.5/10. Published 2019-11-13.

How severe is CVE-2019-3641?

Medium severity. CVSS v3 base score is 4.5 out of 10.

Auth bypass in Mcafee Threat_intelligence_exchange_server

CVE-2019-3641

Abuse of Authorization vulnerability in APIs exposed by TIE server in McAfee Threat Intelligence Exchange Server (TIE Server) 3.0.0 allows remote authenticated users to modify stored reputation data via specially crafted messages.

EPSS: 0.007 (50.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N.

Affected products

Mcafee Threat_intelligence_exchange_server — versions 3.0.0
Mcafee,llc Threat Intelligence Exchange Server (Tie Server) — versions 3.0.x 3.0.0

Weakness classification (CWE)

CWE-285 — Improper Authorization

References

trellixpsirt@trellix.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2019-3641?: CVE-2019-3641 is a medium-severity vulnerability in Mcafee Threat_intelligence_exchange_server, classified under Improper Authorization. CVSS score: 4.5/10. Published 2019-11-13.
How severe is CVE-2019-3641?: Medium severity. CVSS v3 base score is 4.5 out of 10.