Design/Logic Flaw

2018-10-0322:01:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.8%

JSON

SSH host keys generation vulnerability in the server in McAfee Threat Intelligence Exchange Server (TIE Server) 1.3.0, 2.0.x, 2.1.x, 2.2.0 allows man-in-the-middle attackers to spoof servers via acquiring keys from another environment.

CPENameOperatorVersion
threat_intelligence_exchange_servereq1.3.0
threat_intelligence_exchange_serverge2.0.0
threat_intelligence_exchange_serverle2.0.1
threat_intelligence_exchange_serverge2.1.0
threat_intelligence_exchange_serverle2.1.1
threat_intelligence_exchange_servereq2.2.0

Name	Operator	Version
threat_intelligence_exchange_server	eq	1.3.0
threat_intelligence_exchange_server	ge	2.0.0
threat_intelligence_exchange_server	le	2.0.1
threat_intelligence_exchange_server	ge	2.1.0
threat_intelligence_exchange_server	le	2.1.1
threat_intelligence_exchange_server	eq	2.2.0

References

kc.mcafee.com/corporate/index?page=content&id=SB10253