Read the docs
TI-2019-02684 Aliases CVE-2019-3641GHSA-qfxj-w5h6-q54f

Exploitation of Authorization in TIE Server

Priority LOW 22CWE-285Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
Required
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
None · High · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-285.

Summary

Abuse of Authorization vulnerability in APIs exposed by TIE server in McAfee Threat Intelligence Exchange Server (TIE Server) 3.0.0 allows remote authenticated users to modify stored reputation data via specially crafted messages.

Why it matters now

EPSS 0.00747 55th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
McAfeeThreat Intelligence Exchange Server (TIE Server)3.0.x 3.0.0—No fix listedCNA
  • Threat Intelligence Exchange Server (TIE Server) VendorMcAfee Affected 3.0.x 3.0.0 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:mcafee:threat_intelligence_exchange_server:3.0.0:*:*:*:*:*:*:*3.0.0VulnerableMcAfee
  • cpe:2.3:a:mcafee:threat_intelligence_exchange_server:3.0.0:*:*:*:*:*:*:* Versions 3.0.0 Vulnerable ·McAfee

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-3641
  2. 2026-10-03 Alias added: GHSA-qfxj-w5h6-q54f

References

Other 1

  • TI-2019-01190 0-byte record padding oracle CVSS 3.1MEDIUM 5.9
  • TI-2020-02529 Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component… CVSS 3.1MEDIUM 5.3
  • TI-2020-02482 Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component… CVSS 3.1MEDIUM 5.3
  • TI-2019-02757 Improper signature verification in Dell RSA BSAFE Crypto-J CVSS 3.1MEDIUM 6.5
  • TI-2018-04928 Threat Intelligence Exchange Server (TIE Server) SSH host keys generation vulnerability CVSS 3.1MEDIUM 5.9
  • TI-2020-00527 Incomplete cleanup from specific special register read operations in some Intel(R)… CVSS 3.1MEDIUM 5.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences