CVE-2019-6145

CVE-2019-6145: vulnerability in Forcepoint VPN Client for Windows

Published · Updated

Follow this CVE+ Monitor VPN Client

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.7%
Forcepoint VPN Client for Windows versions lower than 6.6.1 have an unquoted search path vulnerability. This enables local privilege escalation to SYSTEM user. By default, only local administrators can write executables to the vulnerable directories. Forcepoint thanks Peleg Hadar of SafeBreach Labs for finding this vulnerability and for reporting it to us.
Affected products
Forcepoint · Forcepoint VPN Client for Windows