Read the docs
TI-2019-02664 Aliases CVE-2019-3612GHSA-7v4x-qvrr-x26c

Information disclosure vulnerability in McAfee TIE Server and DXL Platform

Priority LOW 20CWE-312Published · Updated

Key facts

Attack vector
Local
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-312.

Summary

Information Disclosure vulnerability in McAfee DXL Platform and TIE Server in DXL prior to 5.0.1 HF2 and TIE prior to 2.3.1 HF1 allows Authenticated users to view sensitive information in plain text via the GUI or command line.

Why it matters now

EPSS 0.0024 15th percentileScored 2026-11-07
Fix Fixed Data eXchange Layer (DXL) Platform (McAfee, LLC): 5.0.1 HF2Threat Intelligence Exchange (TIE) Server (McAfee, LLC): 2.3.1 HF1

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
McAfeeData eXchange Layer (DXL) Platformbefore 5.0.1 HF25.0.1 HF2Patch availableCNA
McAfeeThreat Intelligence Exchange (TIE) Serverbefore 2.3.1 HF12.3.1 HF1Patch availableCNA
  • Data eXchange Layer (DXL) Platform VendorMcAfee Affected before 5.0.1 HF2 Fixed in 5.0.1 HF2 Patch available CNA
  • Threat Intelligence Exchange (TIE) Server VendorMcAfee Affected before 2.3.1 HF1 Fixed in 2.3.1 HF1 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:mcafee:data_exchange_layer:*:*:*:*:*:*:*:*4.0.0 – 4.1.2; 5.0.0 – 5.0.1VulnerableMcAfee
cpe:2.3:a:mcafee:threat_intelligence_exchange:*:*:*:*:*:*:*:*2.0.0 – 2.3.1VulnerableMcAfee
  • cpe:2.3:a:mcafee:data_exchange_layer:*:*:*:*:*:*:*:* Versions 4.0.0 – 4.1.2; 5.0.0 – 5.0.1 Vulnerable ·McAfee
  • cpe:2.3:a:mcafee:threat_intelligence_exchange:*:*:*:*:*:*:*:* Versions 2.0.0 – 2.3.1 Vulnerable ·McAfee

Remediation

  • Fix · CNA Data eXchange Layer (DXL) Platform (McAfee, LLC) Fixed in 5.0.1 HF2
  • Fix · CNA Threat Intelligence Exchange (TIE) Server (McAfee, LLC) Fixed in 2.3.1 HF1

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-3612
  2. 2026-10-03 Alias added: GHSA-7v4x-qvrr-x26c

References

Other 1

  • TI-2019-01190 0-byte record padding oracle CVSS 3.1MEDIUM 5.9
  • TI-2022-02025 DXL Broker privilege escalation vulnerability CVSS 3.1MEDIUM 6.5
  • TI-2020-05859 Unquoted service executable path CVSS 3.1MEDIUM 5.5
  • TI-2016-03385 The McAfee VirusScan Console (mcconsol.exe) in McAfee Active Response (MAR) before… CVSS 3.0MEDIUM 5.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences