Approved changes feed: RSS · Atom

cpe:2.3:a:forcepoint:forcepoint_vpn_client_for_windows:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorForcepoint (c3005c4c-8fd3-593e-a1ec-2b5662cc73af)
ProductForcepoint Vpn Client For Windows (6c9e604a-93ed-56ed-9a61-12e9f0b305d3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-6145 vulnerable 2026-06-03 14:40:36.834959 Details available
Forcepoint VPN Client for Windows versions lower than 6.6.1 have an unquoted search path vulnerability. This enables local privilege escalation to SYSTEM user. By default, only local administrators can write executables to the vulnerable directories. Forcepoint thanks Peleg Hadar of SafeBreach Labs for finding this vulnerability and for reporting it to us.
Published: 2019-09-20T19:56:34.000Z
Updated: 2024-08-04T20:16:24.728Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.