CVE-2019-6143
Last modified
CVE-2019-6143 is a critical-severity vulnerability rated 9.1/10 on the CVSS scale. Forcepoint Next Generation Firewall (Forcepoint NGFW) 6.4.x before 6.4.7, 6.5.x before 6.5.4, and 6.6.x before 6.6.2 has a serious authentication vulnerability that potentially allows unauthorized users to bypass password authentication and access services protected by the NGFW Engine. The vulnerability affects the following NGFW features when the LDAP authentication method is used as the backend authentication: IPsec VPN, SSL VPN or Browser-based user authentication. EPSS estimates a 1.13% chance of exploitation in the next 30 days.
Description
Forcepoint Next Generation Firewall (Forcepoint NGFW) 6.4.x before 6.4.7, 6.5.x before 6.5.4, and 6.6.x before 6.6.2 has a serious authentication vulnerability that potentially allows unauthorized users to bypass password authentication and access services protected by the NGFW Engine. The vulnerability affects the following NGFW features when the LDAP authentication method is used as the backend authentication: IPsec VPN, SSL VPN or Browser-based user authentication. The vulnerability does not apply when any other backend authentication is used. The RADIUS authentication method is not vulnerable, for example.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Forcepoint | Next Generation Firewall | >= 6.4.0, < 6.4.7 |
| Forcepoint | Next Generation Firewall | >= 6.5.0, < 6.5.4 |
| Forcepoint | Next Generation Firewall | >= 6.6.0, < 6.6.2 |
References
- https://help.forcepoint.com/security/CVE/CVE-2019-6143.htmlVendor Advisory
- https://help.forcepoint.com/security/CVE/CVE-2019-6143.htmlVendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-6143?
How severe is CVE-2019-6143?
How do I fix CVE-2019-6143?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-6137An issue was discovered in lib60870 2.1.1. LinkLayer_setAddr…
- CVE-2019-6138An issue has been found in libIEC61850 v1.3.1. Memory_malloc…
- CVE-2019-6139Forcepoint User ID (FUID) server versions up to 1.2 have a r…9.8
- CVE-2019-6140A configuration issue has been discovered in Forcepoint Emai…9.8
- CVE-2019-6141Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2019-6142It has been reported that XSS is possible in Forcepoint Emai…6.1
- CVE-2019-6144This vulnerability allows a normal (non-admin) user to disab…6.5
- CVE-2019-6145Forcepoint VPN Client for Windows versions lower than 6.6.1 …6.7
- CVE-2019-6146It has been reported that cross-site scripting (XSS) is poss…6.1
- CVE-2019-6147Forcepoint NGFW Security Management Center (SMC) versions lo…5.9
- CVE-2019-6148Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2019-6149An unquoted search path vulnerability was identified in Leno…6.7
Are you affected by CVE-2019-6143?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST