SSH host keys generation vulnerability in the server in McAfee Threat Intelligence Exchange Server (TIE Server) 1.3.0, 2.0.x, 2.1.x, 2.2.0 allows man-in-the-middle attackers to spoof servers via acquiring keys from another environment.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Threat_intelligence_exchange_server | Mcafee | 2.0.0 (including) | 2.0.1 (including) |
| Threat_intelligence_exchange_server | Mcafee | 2.1.0 (including) | 2.1.1 (including) |
| Threat_intelligence_exchange_server | Mcafee | 1.3.0 (including) | 1.3.0 (including) |
| Threat_intelligence_exchange_server | Mcafee | 2.2.0 (including) | 2.2.0 (including) |
References
- https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10253
- https://kc.mcafee.com/corporate/index?page=content\u0026id=SB10253