{"id":"CVE-2019-3641","aliases":["EUVD-2019-13276","GHSA-qfxj-w5h6-q54f"],"status":"published","title":"Exploitation of Authorization in TIE Server","description":"Abuse of Authorization vulnerability in APIs exposed by TIE server in McAfee Threat Intelligence Exchange Server (TIE Server) 3.0.0 allows remote authenticated users to modify stored reputation data via specially crafted messages.","severity":{"version":"3.1","score":4.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00747,"percentile":0.5515,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-285"],"published":"2019-11-13T10:35:52Z","modified":"2026-06-17T02:35:20Z","products":[{"vendor":"mcafee","product":"threat_intelligence_exchange_server"},{"vendor":"mcafee,llc","product":"threat intelligence exchange server (tie server)"}],"references":[{"url":"https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10303","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-3641"},{"url":"https://github.com/advisories/GHSA-qfxj-w5h6-q54f"}],"sources":{"cve":[{"id":"CVE-2019-3641","title":"Exploitation of Authorization in TIE Server","description":"Abuse of Authorization vulnerability in APIs exposed by TIE server in McAfee Threat Intelligence Exchange Server (TIE Server) 3.0.0 allows remote authenticated users to modify stored reputation data via specially crafted messages.","status":"published","published":"2019-11-13T10:35:52Z","modified":"2024-08-04T19:12:09.684Z","cvss":[{"version":"3.1","score":4.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-285"],"updated_at":"2026-11-02T14:20:23.048861Z"}],"euvd":[{"id":"EUVD-2019-13276","description":"Abuse of Authorization vulnerability in APIs exposed by TIE server in McAfee Threat Intelligence Exchange Server (TIE Server) 3.0.0 allows remote authenticated users to modify stored reputation data via specially crafted messages.","status":"published","published":"2019-11-13T10:35:52Z","modified":"2024-08-04T19:12:09Z","cvss":[{"version":"3.1","score":4.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-03T03:06:54.939848Z"}],"ghsa":[{"id":"GHSA-qfxj-w5h6-q54f","title":"Abuse of Authorization vulnerability in APIs exposed by TIE server in McAfee Threat Intelligence...","description":"Abuse of Authorization vulnerability in APIs exposed by TIE server in McAfee Threat Intelligence Exchange Server (TIE Server) 3.0.0 allows remote authenticated users to modify stored reputation data via specially crafted messages.","status":"published","published":"2022-05-24T17:00:51Z","modified":"2023-01-28T05:07:39Z","updated_at":"2026-11-02T14:44:33.554453Z"}],"nvd":[{"id":"CVE-2019-3641","description":"Abuse of Authorization vulnerability in APIs exposed by TIE server in McAfee Threat Intelligence Exchange Server (TIE Server) 3.0.0 allows remote authenticated users to modify stored reputation data via specially crafted messages.","status":"published","published":"2019-11-13T11:15:10.56Z","modified":"2026-06-17T02:35:20.27Z","cvss":[{"version":"3.1","score":4.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":4.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":3.5,"vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-285"],"updated_at":"2026-11-02T14:05:35.052973Z"}]}}