CVE-2019-6143: Critical severity forcepoint next generation firewall vulnerability
Forcepoint Next Generation Firewall (Forcepoint NGFW) 6.4.x before 6.4.7, 6.5.x before 6.5.4, and 6.6.x before 6.6.2 has a serious authentication vulnerability that potentially allows unauthorized users to bypass password authentication and access services protected by the NGFW Engine. The vulnerability affects the following NGFW features when the LDAP authentication method is used as the backend authentication: IPsec VPN, SSL VPN or Browser-based user authentication. The vulnerability does not apply when any other backend authentication is used. The RADIUS authentication method is not vulnerable, for example.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-6143?
CVE-2019-6143 is a serious authentication vulnerability in Forcepoint Next Generation Firewall (NGFW) versions 6.4.x before 6.4.7, 6.5.x before 6.5.4, and 6.6.x before 6.6.2. It allows unauthorized users to bypass password authentication and access protected services.
What is the severity of CVE-2019-6143?
The severity of CVE-2019-6143 is critical, with a CVSS score of 9.1.
How does CVE-2019-6143 affect Forcepoint Next Generation Firewall?
CVE-2019-6143 affects Forcepoint NGFW versions 6.4.x before 6.4.7, 6.5.x before 6.5.4, and 6.6.x before 6.6.2, allowing unauthorized users to bypass password authentication and access protected services.
How can I fix CVE-2019-6143?
To fix CVE-2019-6143, update your Forcepoint NGFW to version 6.4.7 or later, 6.5.4 or later, or 6.6.2 or later.
Where can I find more information about CVE-2019-6143?
For more information about CVE-2019-6143, you can visit the following link: https://help.forcepoint.com/security/CVE/CVE-2019-6143.html