high7.8
CVE-2019-19675
In Ivanti Workspace Control before 10.3.180.0.
Impact
In Ivanti Workspace Control before 10.3.180.0. a locally authenticated user with low privileges can bypass Managed Application Security by leveraging an unspecified attack vector in Workspace Preferences, when it is enabled. As a result, the attacker can start applications that should be blocked.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ivanti | Workspace Control | before 10.3.180.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://forums.ivanti.com/s/article/Locally-authenticated-user-can-bypass-File-and-Folder-Security-by-leveraging-an-unspecified-attack-vector
- https://forums.ivanti.com/s/article/Locally-authenticated-user-can-bypass-File-and-Folder-Security-by-leveraging-an-unspecified-attack-vector