CoreCVE
Back

MEDIUM

Forcepoint VPN Client for Windows versions lower than 6.6.1 have an unquoted search path vulnerability

Published Sep 20, 2019

Description

Forcepoint VPN Client for Windows versions lower than 6.6.1 have an unquoted search path vulnerability. This enables local privilege escalation to SYSTEM user. By default, only local administrators can write executables to the vulnerable directories. Forcepoint thanks Peleg Hadar of SafeBreach Labs for finding this vulnerability and for reporting it to us.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-428

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner forcepoint
Published Sep 20, 2019
Updated Aug 4, 2024
Reserved Jan 11, 2019
Link CVE-2019-6145
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2019-6145
Red Hat
Severity n/a
Public date n/a
Links CVE-2019-6145