VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Feb 7, 2019· Updated Jun 17, 2026

CVE-2019-6139

CVE-2019-6139

Description

Forcepoint User ID (FUID) server versions up to 1.2 have a remote arbitrary file upload vulnerability on TCP port 5001. Successful exploitation of this vulnerability may lead to remote code execution. To fix this vulnerability, upgrade to FUID version 1.3 or higher. To prevent the vulnerability on FUID versions 1.2 and below, apply local firewall rules on the FUID server to disable all external access to port TCP/5001. FUID requires this port only for local connections through the loopback interface.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Forcepoint/User ID2 versions
    cpe:2.3:a:forcepoint:user_id:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:forcepoint:user_id:*:*:*:*:*:*:*:*range: <1.3.0
    • (no CPE)range: <=1.2
  • Forcepoint ./Forcepoint User ID (FUID) serverv5
    Range: Forcepoint User ID (FUID) server versions up to 1.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.