CVE-2019-6143 - CVE House
Back to Database
Status published Critical CVE-2019-6143

Forcepoint Next Generation Firewall (Forcepoint NGFW) 6.4.x before 6.4.7, 6.5.x...

Vulnerability Description

Forcepoint Next Generation Firewall (Forcepoint NGFW) 6.4.x before 6.4.7, 6.5.x before 6.5.4, and 6.6.x before 6.6.2 has a serious authentication vulnerability that potentially allows unauthorized users to bypass password authentication and access services protected by the NGFW Engine. The vulnerability affects the following NGFW features when the LDAP authentication method is used as the backend authentication: IPsec VPN, SSL VPN or Browser-based user authentication. The vulnerability does not apply when any other backend authentication is used. The RADIUS authentication method is not vulnerable, for example.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-6143

Credits & Attribution

No credits recorded in the NVD database.

References

More from Forcepoint

View All →
CVE-2025-2274
Stored Cross Site Scripting in Forcepoint Web Security
Medium 4.8
CVE-2025-2272
Privilege Escalation and Arbitrary code execution in F1E Endpoint
High 7.3
CVE-2025-14026
Vulnerable Python version used in Forcepoint One DLP Client
Unknown 0
CVE-2025-12694
Local Privilege Escalation in VPN Client
High 8.5
CVE-2025-12690
Local Privilege Escalation in NGFW Engine
High 7.3

Affected Vendor

Affected Software

Forcepoint Next Generation Firewall
Vulnerable Versions:
6.4.0 - 6.4.6, 6.5.0 - 6.5.3, 6.6.0 - 6.6.1

Timeline

Official Publish: August 20th, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.