PT-2019-17980 · Forcepoint · Forcepoint Vpn Client For Windows

Peleg Hadar · Published 2019-09-20 · Updated 2022-04-18 · CVE-2019-6145

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Forcepoint VPN Client for Windows versions lower than 6.6.1

Description The issue allows for local privilege escalation to the SYSTEM user due to an unquoted search path vulnerability. By default, only local administrators can write executables to the vulnerable directories.

Recommendations For Forcepoint VPN Client for Windows versions lower than 6.6.1, update to version 6.6.1 or later to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2019-6145

Affected Products

Forcepoint Vpn Client For Windows

References · 7

• 🔥 https://safebreach.com/Post/Forcepoint-VPN-Client-for-Windows-Unquoted-Search-Path-and-Potential-Abuses-CVE-2019-6145 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-6145 · Security Note
• https://help.forcepoint.com/security/CVE/CVE-2019-6145.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-6145 · Vendor Advisory
• https://t.me/canyoupwnme/5953 · Telegram Post
• https://t.me/rnetsec/10474 · Telegram Post
• https://t.me/defcon_news/25186 · Telegram Post