title: Information disclosure vulnerability in McAfee TIE Server and DXL Platform
description: Information Disclosure vulnerability in McAfee DXL Platform and TIE Server in DXL prior to 5.0.1 HF2 and TIE prior to 2.3.1 HF1 allows Authenticated users to view sensitive information in plain text via the GUI or command line.
problem types: Information Disclosure vulnerability
affected:
{
product: Data eXchange Layer (DXL) Platform
vendor: McAfee, LLC
versions:
lessThan: 5.0.1 HF2, status: affected, version: unspecified, versionType: custom
}
{
product: Threat Intelligence Exchange (TIE) Server
vendor: McAfee, LLC
versions:
lessThan: 2.3.1 HF1, status: affected, version: unspecified, versionType: custom
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 8.2
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
version: 3.0
]