CVE-2019-6139

Forcepoint User ID (FUID) server versions up to 1.2 have a remote arbitrary file upload vulnerability on TCP port 5001. Successful exploitation of this vulnerability may lead to remote code execution. To fix this vulnerability, upgrade to FUID version 1.3 or higher. To prevent the vulnerability on FUID versions 1.2 and below, apply local firewall rules on the FUID server to disable all external access to port TCP/5001. FUID requires this port only for local connections through the loopback interface.

• CWE-434

• https://help.forcepoint.com/security/CVE/CVE-2019-6139.htmlVendor Advisory
• https://help.forcepoint.com/security/CVE/CVE-2019-6139.htmlVendor Advisory

Published

Feb 7, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-6132An issue was discovered in Bento4 v1.5.1-627. There is a mem…
• CVE-2019-6133In PolicyKit (aka polkit) 0.115, the "start time" protection…
• CVE-2019-6135An issue has been found in libIEC61850 v1.3.1. Memory_malloc…
• CVE-2019-6136An issue has been found in libIEC61850 v1.3.1. Ethernet_setP…
• CVE-2019-6137An issue was discovered in lib60870 2.1.1. LinkLayer_setAddr…
• CVE-2019-6138An issue has been found in libIEC61850 v1.3.1. Memory_malloc…
• CVE-2019-6140A configuration issue has been discovered in Forcepoint Emai…9.8
• CVE-2019-6141Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-6142It has been reported that XSS is possible in Forcepoint Emai…6.1
• CVE-2019-6143Forcepoint Next Generation Firewall (Forcepoint NGFW) 6.4.x …9.1
• CVE-2019-6144This vulnerability allows a normal (non-admin) user to disab…6.5
• CVE-2019-6145Forcepoint VPN Client for Windows versions lower than 6.6.1 …6.7