Lucene search
HistorySep 18, 2015 - 2:59 p.m.
CVE-2015-7238
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
AI Score
5.8
Confidence
Low
EPSS
0
Percentile
5.1%
The Secondary server in Threat Intelligence Exchange (TIE) before 1.2.0 uses weak permissions for unspecified (1) configuration files and (2) installation logs, which allows local users to obtain sensitive information by reading the files.
Affected configurations
Node
mcafeethreat_intelligence_exchangeRange≤1.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mcafee | threat_intelligence_exchange | * | cpe:2.3:a:mcafee:threat_intelligence_exchange:*:*:*:*:*:*:*:* |
Related
prion
prion
Information disclosure
2015-09-18 14:59:00
cvelist
cvelist
CVE-2015-7238
2015-09-18 14:00:00
cve
cve
CVE-2015-7238
2015-09-18 14:59:03
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
AI Score
5.8
Confidence
Low
EPSS
0
Percentile
5.1%
Related for NVD:CVE-2015-7238