CVE-2019-3641: Exploitation of Authorization in TIE Server

Published Nov 13, 2019

Updated

Abuse of Authorization vulnerability in APIs exposed by TIE server in McAfee Threat Intelligence Exchange Server (TIE Server) 3.0.0 allows remote authenticated users to modify stored reputation data via specially crafted messages.

Affected Software

1 affected component

McAfee Threat Intelligence Exchange Server=3.0.0

Remediation

Patch Available

https://kc.mcafee.com/corporate/index?page=content&id=SB10303

Event History

Nov 13, 2019

CVE Published

via MITRE·10:35 AM

Data Sourced

via MITRE·10:35 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2019-3641?

CVE-2019-3641 is an Abuse of Authorization vulnerability in APIs exposed by TIE server in McAfee Threat Intelligence Exchange Server (TIE Server) 3.0.0.

How does CVE-2019-3641 affect McAfee Threat Intelligence Exchange Server?

CVE-2019-3641 allows remote authenticated users to modify stored reputation data via specially crafted messages.

What is the severity of CVE-2019-3641?

CVE-2019-3641 has a severity rating of medium (4.5).

How can I fix CVE-2019-3641?

To fix CVE-2019-3641, it is recommended to apply the necessary updates provided by McAfee.

Where can I find more information about CVE-2019-3641?

More information about CVE-2019-3641 can be found in the advisory provided by McAfee: [link](https://kc.mcafee.com/corporate/index?page=content&id=SB10303).