Unscored severity · published Sep 18, 2015
CVE-2015-7238
The Secondary server in Threat Intelligence Exchange (TIE) before 1.2.0 uses weak permissions for unspecified (1) configuration files and (2) installation logs, which allows local…
–
CVSS
0.3%
EPSS
No
On KEV
Description
The Secondary server in Threat Intelligence Exchange (TIE) before 1.2.0 uses weak permissions for unspecified (1) configuration files and (2) installation logs, which allows local users to obtain sensitive information by reading the files.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 25% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TI
Threat Intelligence Exchange · Mcafee
through 1.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-7238
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-7238
Vendor Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10132
More from Threat Intelligence Exchange
4.4
CVE-2019-3612
Information Disclosure vulnerability in McAfee DXL Platform and TIE Server in DXL prior to 5.0.1 HF2 and TIE prior to 2.3.1 HF1 allows Authenticated users to view sensitive…