Forcepoint Email Security 8.5.x Password Reset URL password recovery

Summaryinfo

A vulnerability categorized as problematic has been discovered in Forcepoint Email Security 8.5.x. Affected is an unknown function of the component Password Reset URL. Such manipulation leads to password recovery. This vulnerability is referenced as CVE-2018-16529. It is possible to launch the attack remotely. No exploit is available. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability was found in Forcepoint Email Security 8.5.x (Anti-Malware Software). It has been rated as critical. Affected by this issue is an unknown functionality of the component Password Reset URL. The manipulation with an unknown input leads to a password recovery vulnerability. Using CWE to declare the problem leads to CWE-640. The product contains a mechanism for users to recover or change their passwords without knowing the original password, but the mechanism is weak. Impacted is integrity, and availability. CVE summarizes:

A password reset vulnerability has been discovered in Forcepoint Email Security 8.5.x. The password reset URL can be used after the intended expiration period or after the URL has already been used to reset a password.

The weakness was published 03/28/2019 as 000016655 as confirmed knowledge base article (Website). The advisory is shared for download at support.forcepoint.com. This vulnerability is handled as CVE-2018-16529 since 09/05/2018. The attack may be launched remotely. No form of authentication is required for exploitation. There are neither technical details nor an exploit publicly available. The MITRE ATT&CK project declares the attack technique as T1552. The advisory points out:

A password reset vulnerability has been discovered in Forcepoint Email Security 8.5.x. The password reset URL can be used after the intended expiration period or after the link has already been used. We would like to thank Eitan Shav from Citadel Cyber Security Consulting for bringing this to our attention.

Upgrading eliminates this vulnerability. The knowledge base article contains the following remark:

This vulnerability has been resolved in the code that will be released by the end of March 2019. This fix will cause the password reset functionality to behave as expected.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• Anti-Malware Software

Vendor

• Forcepoint

Name

• Email Security

Version

• 8.5.x

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion