PT-2019-17980 · Forcepoint · Forcepoint Vpn Client For Windows

Peleg Hadar · Publicado 2019-09-20 · Atualizado 2022-04-18 · CVE-2019-6145

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Forcepoint VPN Client for Windows versions lower than 6.6.1

Description The issue allows for local privilege escalation to the SYSTEM user due to an unquoted search path vulnerability. By default, only local administrators can write executables to the vulnerable directories.

Recommendations For Forcepoint VPN Client for Windows versions lower than 6.6.1, update to version 6.6.1 or later to resolve the issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2019-6145

Produtos afetados

Forcepoint Vpn Client For Windows

Referências · 7

• 🔥 https://safebreach.com/Post/Forcepoint-VPN-Client-for-Windows-Unquoted-Search-Path-and-Potential-Abuses-CVE-2019-6145 · Exploit
• https://t.me/canyoupwnme/5953 · Publicação no Telegram
• https://t.me/rnetsec/10474 · Publicação no Telegram
• https://t.me/defcon_news/25186 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2019-6145 · Nota de Segurança
• https://help.forcepoint.com/security/CVE/CVE-2019-6145.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-6145 · Aviso do Fabricante