Vulnerability Description
A password reset vulnerability has been discovered in Forcepoint Email Security 8.5.x. The password reset URL can be used after the intended expiration period or after the URL has already been used to reset a password.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Forcepoint | Email Security | >= 8.5.0, <= 8.5.3 |
Related Weaknesses (CWE)
References
- https://help.forcepoint.com/security/CVE/CVE-2018-16529.htmlVendor Advisory
- https://seclists.org/fulldisclosure/2018/Nov/23ExploitMailing ListThird Party Advisory
- https://help.forcepoint.com/security/CVE/CVE-2018-16529.htmlVendor Advisory
- https://seclists.org/fulldisclosure/2018/Nov/23ExploitMailing ListThird Party Advisory
FAQ
What is CVE-2018-16529?
CVE-2018-16529 is a vulnerability with a CVSS score of 9.8 (CRITICAL). A password reset vulnerability has been discovered in Forcepoint Email Security 8.5.x. The password reset URL can be used after the intended expiration period or after the URL has already been used to...
How severe is CVE-2018-16529?
CVE-2018-16529 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2018-16529?
Check the references section above for vendor advisories and patch information. Affected products include: Forcepoint Email Security.