Auth bypass in Forcepoint Next Generation Firewall
CVE-2019-6143
Forcepoint Next Generation Firewall (Forcepoint NGFW) 6.4.x before 6.4.7, 6.5.x before 6.5.4, and 6.6.x before 6.6.2 has a serious authentication vulnerability that potentially allows unauthorized users to bypass password authentication and access services protected by the NGFW Engine. The vulnerability affects the following NGFW features when the LDAP authentication method is used as the backend authentication: IPsec VPN, SSL VPN or Browser-based user authentication. The vulnerability does not apply when any other backend authentication is used. The RADIUS authentication method is not vulnerable, for example.
Vulnerability class: Broken Authentication
Published · last modified .
CVSS v3 metric
CVSS v3 base score 9.1 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N.
EPSS exploit prediction
EPSS: 0.011 (65.0th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 65th percentile — 65.0% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.011 · newest: 0.011 · change: 0.000
Affected products
- Forcepoint Next Generation Firewall — versions 6.4.0 - 6.4.6, 6.5.0 - 6.5.3, 6.6.0 - 6.6.1
- Forcepoint Next Generation Firewall
Weakness classification (CWE)
References
- help.forcepoint.com/security/CVE/CVE-2019-6143.html (Vendor Advisory)
Frequently asked questions
- What is CVE-2019-6143?
- CVE-2019-6143 is a critical-severity vulnerability in Forcepoint Next Generation Firewall, classified under Improper Authentication. CVSS score: 9.1/10. Published 2019-08-20.
- How severe is CVE-2019-6143?
- Critical severity. CVSS v3 base score is 9.1 out of 10.