PT-2019-17975 · Forcepoint · Forcepoint User Id

Publicado 2019-02-07 · Atualizado 2022-04-18 · CVE-2019-6139

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Forcepoint User ID (FUID) versions up to 1.2

Description The issue allows for remote arbitrary file upload on TCP port 5001, which may lead to remote code execution.

Recommendations For FUID versions up to 1.2, upgrade to FUID version 1.3 or higher. As a temporary workaround for FUID versions 1.2 and below, apply local firewall rules on the FUID server to disable all external access to port TCP/5001.

Correção

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2019-6139

Produtos afetados

Forcepoint User Id

Referências · 3

• https://help.forcepoint.com/security/CVE/CVE-2019-6139.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-6139 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-6139 · Aviso do Fabricante