CVEvulnerability

CVE-2018-6695

5.9 MEDIUM Published 2018-10-03 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-10-03
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.9 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 3.0 ([email protected])
6.1 MEDIUM — CVSS:3.0/AV:A/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N

Description

SSH host keys generation vulnerability in the server in McAfee Threat Intelligence Exchange Server (TIE Server) 1.3.0, 2.0.x, 2.1.x, 2.2.0 allows man-in-the-middle attackers to spoof servers via acquiring keys from another environment.

Affected configurations

• mcafee threat intelligence exchange server (>= 2.0.0 <= 2.0.1) • mcafee threat intelligence exchange server (>= 2.1.0 <= 2.1.1) • mcafee threat intelligence exchange server 1.3.0 • mcafee threat intelligence exchange server 2.2.0

References