Lucene search

[email protected]CVE-2019-3612

HistoryApr 10, 2019 - 8:29 p.m.

CVE-2019-3612

2019-04-1020:29:01

CWE-312

[email protected]

web.nvd.nist.gov

mcafee

dxl

tie

information disclosure

vulnerability

cve-2019-3612

nvd

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

4.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

JSON

Information Disclosure vulnerability in McAfee DXL Platform and TIE Server in DXL prior to 5.0.1 HF2 and TIE prior to 2.3.1 HF1 allows Authenticated users to view sensitive information in plain text via the GUI or command line.

Affected configurations

NVD

Node

mcafeedata_exchange_layerRange4.0.0–4.1.2

mcafeedata_exchange_layerRange5.0.0–5.0.1

mcafeethreat_intelligence_exchangeRange2.0.0–2.3.1

CPENameOperatorVersion
mcafee:data_exchange_layermcafee data exchange layerle4.1.2
mcafee:data_exchange_layermcafee data exchange layerle5.0.1
mcafee:threat_intelligence_exchangemcafee threat intelligence exchangele2.3.1

CPE	Name	Operator	Version
mcafee:data_exchange_layer	mcafee data exchange layer	le	4.1.2
mcafee:data_exchange_layer	mcafee data exchange layer	le	5.0.1
mcafee:threat_intelligence_exchange	mcafee threat intelligence exchange	le	2.3.1

CNA Affected

[
  {
    "product": "Data eXchange Layer (DXL) Platform",
    "vendor": "McAfee, LLC",
    "versions": [
      {
        "lessThan": "5.0.1 HF2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Threat Intelligence Exchange (TIE) Server",
    "vendor": "McAfee, LLC",
    "versions": [
      {
        "lessThan": "2.3.1 HF1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

kc.mcafee.com/corporate/index?page=content&id=SB10279

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

4.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

JSON

Related for CVE-2019-3612

nvd1 prion1 cvelist1