{"id":"CVE-2019-3641","state":"PUBLISHED","title":"Exploitation of Authorization in TIE Server","description":"Abuse of Authorization vulnerability in APIs exposed by TIE server in McAfee Threat Intelligence Exchange Server (TIE Server) 3.0.0 allows remote authenticated users to modify stored reputation data via specially crafted messages.","publishedAt":"2019-11-13T10:35:52.000Z","updatedAt":"2024-08-04T19:12:09.684Z","severity":{"score":4.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N","source":"trellix"},"assigner":"trellix","products":["McAfee,LLC Threat Intelligence Exchange Server (TIE Server)"],"affected":[{"vendor":"McAfee,LLC","product":"Threat Intelligence Exchange Server (TIE Server)","versions":[{"version":"3.0.x 3.0.0","status":"affected"}]}],"references":["https://kc.mcafee.com/corporate/index?page=content&id=SB10303"],"weaknesses":["CWE-285"],"ingestedAt":"2026-10-29T19:45:59.128Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2019/3xxx/CVE-2019-3641.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2019-3641","state":"PUBLISHED","datePublished":"2019-11-13T10:35:52.000Z","dateUpdated":"2024-08-04T19:12:09.684Z","assignerShortName":"trellix","assignerOrgId":"01626437-bf8f-4d1c-912a-893b5eb04808","dateReserved":"2019-01-03T00:00:00.000Z"},"containers":{"cna":{"title":"Exploitation of Authorization in TIE Server","descriptions":[{"lang":"en","value":"Abuse of Authorization vulnerability in APIs exposed by TIE server in McAfee Threat Intelligence Exchange Server (TIE Server) 3.0.0 allows remote authenticated users to modify stored reputation data via specially crafted messages."}],"affected":[{"vendor":"McAfee,LLC","product":"Threat Intelligence Exchange Server (TIE Server)","versions":[{"version":"3.0.x 3.0.0","status":"affected"}]}],"references":[{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10303","tags":["x_refsource_CONFIRM"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N","version":"3.1"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-285","description":"CWE-285 Improper Authorization","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"trellix","dateUpdated":"2019-11-13T10:35:52.000Z","orgId":"01626437-bf8f-4d1c-912a-893b5eb04808"},"source":{"discovery":"INTERNAL"},"x_generator":{"engine":"Vulnogram 0.0.9"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@mcafee.com","ID":"CVE-2019-3641","STATE":"PUBLIC","TITLE":"Exploitation of Authorization in TIE Server"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Threat Intelligence Exchange Server (TIE Server)","version":{"version_data":[{"version_affected":"=","version_name":"3.0.x","version_value":"3.0.0"}]}}]},"vendor_name":"McAfee,LLC"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Abuse of Authorization vulnerability in APIs exposed by TIE server in McAfee Threat Intelligence Exchange Server (TIE Server) 3.0.0 allows remote authenticated users to modify stored reputation data via specially crafted messages."}]},"generator":{"engine":"Vulnogram 0.0.9"},"impact":{"cvss":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N","version":"3.1"}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-285 Improper Authorization"}]}]},"references":{"reference_data":[{"name":"https://kc.mcafee.com/corporate/index?page=content&id=SB10303","refsource":"CONFIRM","url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10303"}]},"source":{"discovery":"INTERNAL"}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10303","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T19:12:09.684Z"}}]}}}