6.1
CVE-2018-6695
- EPSS 0.18%
- Veröffentlicht 03.10.2018 22:01:04
- Zuletzt bearbeitet 21.11.2024 04:11:06
- Quelle trellixpsirt@trellix.com
- CVE-Watchlists
- Unerledigt
LoginThreat Intelligence Exchange Server (TIE Server) SSH host keys generation vulnerability
SSH host keys generation vulnerability in the server in McAfee Threat Intelligence Exchange Server (TIE Server) 1.3.0, 2.0.x, 2.1.x, 2.2.0 allows man-in-the-middle attackers to spoof servers via acquiring keys from another environment.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mcafee ≫ Threat Intelligence Exchange Server Version >= 2.0.0 <= 2.0.1
Mcafee ≫ Threat Intelligence Exchange Server Version >= 2.1.0 <= 2.1.1
Mcafee ≫ Threat Intelligence Exchange Server Version1.3.0
Mcafee ≫ Threat Intelligence Exchange Server Version2.2.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.18% | 0.388 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.9 | 2.2 | 3.6 |
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
| trellixpsirt@trellix.com | 6.1 | 0.9 | 5.2 |
CVSS:3.0/AV:A/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N
|