Medium severity · published Sep 20, 2019
CVE-2019-6145
Forcepoint VPN Client for Windows versions lower than 6.6.1 have an unquoted search path vulnerability
6.7
CVSS
0.7%
EPSS
No
On KEV
Description
Forcepoint VPN Client for Windows versions lower than 6.6.1 have an unquoted search path vulnerability. This enables local privilege escalation to SYSTEM user. By default, only local administrators can write executables to the vulnerable directories. Forcepoint thanks Peleg Hadar of SafeBreach Labs for finding this vulnerability and for reporting it to us.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 52% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VC
Vpn Client · Forcepoint
before 6.6.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-6145
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-6145
Vendor Advisory
https://help.forcepoint.com/security/CVE/CVE-2019-6145.html
Exploit
https://safebreach.com/Post/Forcepoint-VPN-Client-for-Windows-Unquoted-Search-Path-and-Potential-Abuses-CVE-2019-6145
More from Vpn Client
7.8
CVE-2025-12694
Local Privilege Escalation in VPN Client