PT-2019-17981 · Forcepoint · Forcepoint Next Generation Firewall+1

Rhys Postlethwaite · Published 2019-12-23 · Updated 2021-09-16 · CVE-2019-6147

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Forcepoint NGFW Security Management Center (SMC) versions prior to 6.5.12 or 6.7.1

Description The issue can corrupt the internal configuration database under specific circumstances, leading to the SMC producing an incorrect IPsec configuration for the Forcepoint Next Generation Firewall (NGFW). This might result in settings that are weaker than expected.

Recommendations For versions prior to 6.5.12, update to version 6.5.12 or later. For versions prior to 6.7.1, update to version 6.7.1 or later.

Fix

Incorrect Type Conversion or Cast

Weakness Enumeration

CWE-704

Related Identifiers

CVE-2019-6147

Affected Products

Forcepoint Ngfw Security Management Center

Forcepoint Next Generation Firewall

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-6147 · Security Note
• https://osv.dev/vulnerability/CVE-2019-6147 · Vendor Advisory
• https://help.forcepoint.com/security/CVE/CVE-2019-6147.html · Vendor Advisory