CVE-2019-6145

Forcepoint VPN Client for Windows versions lower than 6.6.1 have an unquoted search path vulnerability. This enables local privilege escalation to SYSTEM user. By default, only local administrators can write executables to the vulnerable directories. Forcepoint thanks Peleg Hadar of SafeBreach Labs for finding this vulnerability and for reporting it to us.

• CWE-428

• https://help.forcepoint.com/security/CVE/CVE-2019-6145.htmlVendor Advisory
• https://safebreach.com/Post/Forcepoint-VPN-Client-for-Windows-Unquoted-Search-Path-and-Potential-Abuses-CVE-2019-6145Exploit, Third Party Advisory
• https://help.forcepoint.com/security/CVE/CVE-2019-6145.htmlVendor Advisory
• https://safebreach.com/Post/Forcepoint-VPN-Client-for-Windows-Unquoted-Search-Path-and-Potential-Abuses-CVE-2019-6145Exploit, Third Party Advisory

Published

Sep 20, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-6139Forcepoint User ID (FUID) server versions up to 1.2 have a r…9.8
• CVE-2019-6140A configuration issue has been discovered in Forcepoint Emai…9.8
• CVE-2019-6141Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-6142It has been reported that XSS is possible in Forcepoint Emai…6.1
• CVE-2019-6143Forcepoint Next Generation Firewall (Forcepoint NGFW) 6.4.x …9.1
• CVE-2019-6144This vulnerability allows a normal (non-admin) user to disab…6.5
• CVE-2019-6146It has been reported that cross-site scripting (XSS) is poss…6.1
• CVE-2019-6147Forcepoint NGFW Security Management Center (SMC) versions lo…5.9
• CVE-2019-6148Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-6149An unquoted search path vulnerability was identified in Leno…6.7
• CVE-2019-6150Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-6151Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…