Design/Logic Flaw

2020-04-0420:15:00

PRIOn knowledge base

www.prio-n.com

5.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Ivanti Workspace Control before 10.4.30.0, when SCCM integration is enabled, allows local users to obtain sensitive information (keying material).

CPENameOperatorVersion
workspace_controllt10.4.30.0

CPE	Name	Operator	Version
	workspace_control	lt	10.4.30.0

References

forums.ivanti.com/s/article/A-locally-authenticated-user-with-low-privileges-can-recover-keying-material-due-to-an-unspecified-attack-vector