CVE-2019-3612 Information disclosure vulnerability in McAfee TIE Server and DXL Platform
Authenticated users can view sensitive plain-text information via the GUI or command line in McAfee DXL and TIE Server.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-3612?
CVE-2019-3612 is a high-severity vulnerability in McAfee, LLC Data eXchange Layer (DXL) Platform, published on 10 Apr 2019. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Information Disclosure vulnerability in McAfee DXL Platform and TIE Server in DXL prior to 5.0.1 HF2 and TIE prior to 2.3.1 HF1 allows Authenticated users to view sensitive information in plain text via the GUI or command line.
Weakness: CWE-312
Which versions are affected by CVE-2019-3612?
It affects 2 products.
Products include Mcafee Data Exchange Layer, Mcafee Threat Intelligence Exchange.
How do I fix CVE-2019-3612?
No fix has been published for CVE-2019-3612 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-3612 being exploited?
There is no known exploitation of CVE-2019-3612 in the wild and no public exploit code.
Other vulnerabilities in McAfee, LLC Data eXchange Layer (DXL) Platform
Sources
Also known as GHSA-7v4x-qvrr-x26c.