CVE-2018-16529: Critical severity forcepoint email security vulnerability
A password reset vulnerability has been discovered in Forcepoint Email Security 8.5.x. The password reset URL can be used after the intended expiration period or after the URL has already been used to reset a password.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-16529?
The severity of CVE-2018-16529 is critical, with a severity value of 9.8.
What is affected by CVE-2018-16529?
Forcepoint Email Security 8.5.x versions between 8.5.0 and 8.5.3 are affected by CVE-2018-16529.
What is the CWE ID for CVE-2018-16529?
The CWE ID for CVE-2018-16529 is 640.
What is the vulnerability description of CVE-2018-16529?
CVE-2018-16529 is a password reset vulnerability in Forcepoint Email Security 8.5.x where the reset URL remains functional after expiration or previous use.
How can I find more information about CVE-2018-16529?
You can find more information about CVE-2018-16529 on the [Forcepoint support page](https://help.forcepoint.com/security/CVE/CVE-2018-16529.html) and [seclists.org](https://seclists.org/fulldisclosure/2018/Nov/23).