Information Disclosure in Forcepoint Web Security Content Gateway
CVE-2020-6590

7.5HIGH

Key Information:

Vendor

Forcepoint

Status
Forcepoint Web Security Content Gateway
Vendor
CVE Published:
8 April 2021

What is CVE-2020-6590?

An XML input processing vulnerability in Forcepoint Web Security Content Gateway versions prior to 8.5.4 can allow attackers to exploit improper handling of XML data, leading to potential unauthorized access to sensitive information. This vulnerability emphasizes the importance of keeping security products updated to mitigate such risks.

Affected Version(s)

Forcepoint Web Security Content Gateway versions prior to 8.5.4

References

https://help.forcepoint.com/security/CVE/CVE-2020-6590.html
x_refsource_CONFIRM

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.