CVE-2019-3612

VendormcafeeProductdata exchange layer, threat intelligence exchangeDiscoveredApr 10, 2019UpdatedNov 21, 2024

Information Disclosure vulnerability in McAfee DXL Platform and TIE Server in DXL prior to 5.0.1 HF2 and TIE prior to 2.3.1 HF1 allows Authenticated users to view sensitive information in plain text via the GUI or command line.

View graph Watch Export

CVSS v3.1

4.4 MEDIUM

EPSS

0.24%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Related IOCs

seen in the same coverage

CVSS v3.1 Detail

Attack VectorLOCAL

Attack ComplexityLOW

Privileges RequiredHIGH

User InteractionNONE

ScopeUNCHANGED

ConfidentialityHIGH

IntegrityNONE

AvailabilityNONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Connections

3 relationships

CWE-312

source

Timeline

disclosure → media coverage

Apr 10, 2019

Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024