Skip to main content

Improper Authorization

CVE-2019-3641

Medium
4.5/10

Summary

Abuse of Authorization vulnerability in APIs exposed by TIE server in McAfee Threat Intelligence Exchange Server (TIE Server) 3.0.0 allows remote authenticated users to modify stored reputation data via specially crafted messages.

  • LOW
  • NETWORK
  • HIGH
  • UNCHANGED
  • REQUIRED
  • HIGH
  • NONE
  • NONE

CWE-285 - Improper Authorization

The software does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

References

Advisory Timeline

  • Published