CVE-2019-3612: Information Disclosure vulnerability in McAfee DXL Platform and TIE Server in DXL prior to 5.0.1 HF2 and TIE prior to 2.3.1 HF1 allows Authenticated users to…

PriorityP415medium4.4CVSS 3.1

AVLACLPRHUINSUCHINAN

EPSS

0.24%

15.1th percentile

Information Disclosure vulnerability in McAfee DXL Platform and TIE Server in DXL prior to 5.0.1 HF2 and TIE prior to 2.3.1 HF1 allows Authenticated users to view sensitive information in plain text via the GUI or command line.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
mcafee	data_exchange_layer	4.0.0 – 4.1.2	—
mcafee	data_exchange_layer	5.0.0 – 5.0.1	—
mcafee	threat_intelligence_exchange	2.0.0 – 2.3.1	—
mcafee_llc	data_exchange_layer_platform	>= unspecified < 5.0.1 HF2	5.0.1 HF2
mcafee_llc	threat_intelligence_exchange_server	>= unspecified < 2.3.1 HF1	2.3.1 HF1

CVSS provenance

nvdv3.14.4MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

nvdv3.08.2HIGHCVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

nvdv2.02.1LOWAV:L/AC:L/Au:N/C:P/I:N/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.