CVE-2019-6140

Published: Apr 9, 2019Modified: Nov 21, 2024

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

A configuration issue has been discovered in Forcepoint Email Security 8.4.x and 8.5.x: the product is left in a vulnerable state if the hybrid registration process is not completed.

Affected (2)

Products: Forcepoint: Email Security

Forcepoint

1 product

Email Security

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Forcepoint Email Security	From 8.5 to 8.5.3
Forcepoint Email Security	Version 8.4

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (2)

https://help.forcepoint.com/security/CVE/CVE-2019-6140.html

Source: psirt@forcepoint.com

Vendor Advisory

https://help.forcepoint.com/security/CVE/CVE-2019-6140.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.