title:  Threat Intelligence Exchange Server (TIE Server) SSH host keys generation vulnerability
description: SSH host keys generation vulnerability in the server in McAfee Threat Intelligence Exchange Server (TIE Server) 1.3.0, 2.0.x, 2.1.x, 2.2.0 allows man-in-the-middle attackers to spoof servers via acquiring keys from another environment.
problem types: SSH host keys generation vulnerability
affected:
{
platforms: x86
product: Threat Intelligence Exchange Server (TIE Server)
vendor: McAfee
versions:
status: affected, version: 1.3.0
lessThan: 2.0.0*, status: affected, version: 2.0.0, versionType: custom
lessThan: 2.3.0*, status: unaffected, version: 2.3.0, versionType: custom
}
metrics:
cvssV3_0: [
attackComplexity: HIGH
attackVector: ADJACENT_NETWORK
availabilityImpact: NONE
baseScore: 6.1
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.0/AV:A/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N
version: 3.0
]