PT-2019-17976 · Forcepoint · Forcepoint Email Security

Published 2019-04-09 · Updated 2022-03-31 · CVE-2019-6140

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Forcepoint Email Security versions 8.4.x through 8.5.x

Description A configuration issue has been discovered in the product, where it is left in a vulnerable state if the hybrid registration process is not completed.

Recommendations For Forcepoint Email Security versions 8.4.x through 8.5.x, complete the hybrid registration process to resolve the issue.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2019-6140

Affected Products

Forcepoint Email Security

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-6140 · Security Note
• https://help.forcepoint.com/security/CVE/CVE-2019-6140.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-6140 · Vendor Advisory