Lucene search
+L

4986 matches found

Prion
Prion
•added 2020/04/04 8:15 p.m.•19 views

Design/Logic Flaw

Ivanti Workspace Control before 10.4.30.0, when SCCM integration is enabled, allows local users to obtain sensitive information keying material...

2.1CVSS5.2AI score0.00476EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2020/04/04 7:02 p.m.•110 views

CVE-2020-11533

Ivanti Workspace Control vulnerability CVE-2020-11533: versions prior to 10.4.30.0 with SCCM integration enabled disclose keying material to local users. Impact is sensitive information disclosure; no exploit details are provided in the sources. Remediation: upgrade to 10.4.30.0 or later (as indi...

5.5CVSS5.1AI score0.00476EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/04/04 7:02 p.m.•35 views

CVE-2020-11533

Ivanti Workspace Control before 10.4.30.0, when SCCM integration is enabled, allows local users to obtain sensitive information keying material...

5.2AI score0.00476EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/04 12:00 a.m.•4 views

CVE-2020-11533: Undefined Security Weakness

Ivanti Workspace Control before 10.4.30.0, when SCCM integration is enabled, allows local users to obtain sensitive information keying material...

5.5CVSS6AI score0.00476EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/03/20 12:00 a.m.•20 views

Unspecified Vulnerability in Ivanti Workspace Control (CNVD-2020-22260)

Ivanti Workspace Control RES One Workspace is a set of workspace control software from Ivanti, USA. The software includes features such as user management, application management and report management. A security vulnerability exists in Ivanti Workspace Control version 10.3.110.0, which can be...

9.8CVSS6.9AI score0.02875EPSS
SaveExploits0References1
OSV
OSV
•added 2020/03/19 5:15 p.m.•14 views

CVE-2019-16382

An issue was discovered in Ivanti Workspace Control 10.3.110.0. One is able to bypass Ivanti's FileGuard folder protection by renaming the WMTemp work folder used by PowerGrid. A malicious PowerGrid XML file can then be created, after which the folder is renamed back to its original value. Also,...

9.8CVSS7.3AI score0.02875EPSS
SaveExploits0References2
NVD
NVD
•added 2020/03/19 5:15 p.m.•35 views

CVE-2019-16382

An issue was discovered in Ivanti Workspace Control 10.3.110.0. One is able to bypass Ivanti's FileGuard folder protection by renaming the WMTemp work folder used by PowerGrid. A malicious PowerGrid XML file can then be created, after which the folder is renamed back to its original value. Also,...

9.8CVSS8AI score0.02875EPSS
SaveExploits0References2
Prion
Prion
•added 2020/03/19 5:15 p.m.•26 views

Authorization

An issue was discovered in Ivanti Workspace Control 10.3.110.0. One is able to bypass Ivanti's FileGuard folder protection by renaming the WMTemp work folder used by PowerGrid. A malicious PowerGrid XML file can then be created, after which the folder is renamed back to its original value. Also,...

7.5CVSS8AI score0.02875EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2020/03/19 4:57 p.m.•64 views

CVE-2019-16382

CVE-2019-16382 affects Ivanti Workspace Control (10.3.110.0). The issue allows bypassing FileGuard by renaming the WMTemp PowerGrid folder, enabling creation of a malicious PowerGrid XML file and restoring the folder name. CVE-2018-15591 may be exploited via PowerGrid with the /SEE parameter to e...

9.8CVSS8AI score0.02875EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2020/03/19 4:57 p.m.•39 views

CVE-2019-16382

An issue was discovered in Ivanti Workspace Control 10.3.110.0. One is able to bypass Ivanti's FileGuard folder protection by renaming the WMTemp work folder used by PowerGrid. A malicious PowerGrid XML file can then be created, after which the folder is renamed back to its original value. Also,...

8.5AI score0.02875EPSS
SaveExploits0References2
zdt
zdt
•added 2020/03/19 12:00 a.m.•311 views

Ivanti Workspace Manager Security Bypass Vulnerability

Ivanti Workspace Manager Security Bypass Vulnerability Rem Remarks CVE-2019-10885 - 0day Rem An issue was discovered in Ivanti Workspace Control before 10.3.90.0. Local authenticated Rem users with low privileges in a Workspace Control managed session can bypass Workspace Control Rem security...

7.8CVSS0.3AI score0.01043EPSS
SaveExploits2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/19 12:00 a.m.•5 views

CVE-2019-16382: Undefined Security Weakness

An issue was discovered in Ivanti Workspace Control 10.3.110.0. One is able to bypass Ivanti's FileGuard folder protection by renaming the WMTemp work folder used by PowerGrid. A malicious PowerGrid XML file can then be created, after which the folder is renamed back to its original value. Also,...

9.8CVSS7.8AI score0.02875EPSS
SaveExploits0References1
Packet Storm
Packet Storm
•added 2020/03/18 12:00 a.m.•290 views

Ivanti Workspace Manager Security Bypass

Rem Remarks CVE-2019-10885 - 0day Rem An issue was discovered in Ivanti Workspace Control before 10.3.90.0. Local authenticated Rem users with low privileges in a Workspace Control managed session can bypass Workspace Control Rem security features configured for this session by resetting the...

4.6CVSS0.2AI score0.01043EPSS
SaveExploits2
CNVD
CNVD
•added 2019/12/18 12:00 a.m.•12 views

Unspecified Vulnerability in Ivanti Workspace Control

Ivanti Workspace Control RES One Workspace is a set of workspace control software from Ivanti, USA. The software includes features such as user management, application management and report management. A security vulnerability exists in Ivanti Workspace Control versions prior to 10.3.180.0. A loc...

7.8CVSS6.5AI score0.00466EPSS
SaveExploits0References1
OSV
OSV
•added 2019/12/17 3:15 p.m.•10 views

CVE-2019-19675

In Ivanti Workspace Control before 10.3.180.0. a locally authenticated user with low privileges can bypass Managed Application Security by leveraging an unspecified attack vector in Workspace Preferences, when it is enabled. As a result, the attacker can start applications that should be blocked...

7.8CVSS7.1AI score0.00466EPSS
SaveExploits0References1
NVD
NVD
•added 2019/12/17 3:15 p.m.•31 views

CVE-2019-19675

In Ivanti Workspace Control before 10.3.180.0. a locally authenticated user with low privileges can bypass Managed Application Security by leveraging an unspecified attack vector in Workspace Preferences, when it is enabled. As a result, the attacker can start applications that should be blocked...

7.8CVSS7.6AI score0.00466EPSS
SaveExploits0References1
Prion
Prion
•added 2019/12/17 3:15 p.m.•21 views

Authentication flaw

In Ivanti Workspace Control before 10.3.180.0. a locally authenticated user with low privileges can bypass Managed Application Security by leveraging an unspecified attack vector in Workspace Preferences, when it is enabled. As a result, the attacker can start applications that should be blocked...

4.4CVSS7.5AI score0.00466EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2019/12/17 2:42 p.m.•62 views

CVE-2019-19675

CVE-2019-19675 affects Ivanti Workspace Control (before 10.3.180.0). A locally authenticated user with low privileges can bypass Managed Application Security via an unspecified attack vector in Workspace Preferences, enabling the launching of applications that should be blocked. This is the scope...

7.8CVSS7.5AI score0.00466EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2019/12/17 2:42 p.m.•32 views

CVE-2019-19675

In Ivanti Workspace Control before 10.3.180.0. a locally authenticated user with low privileges can bypass Managed Application Security by leveraging an unspecified attack vector in Workspace Preferences, when it is enabled. As a result, the attacker can start applications that should be blocked...

7.6AI score0.00466EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/17 12:00 a.m.•3 views

CVE-2019-19675: Incorrect Default Permissions

In Ivanti Workspace Control before 10.3.180.0. a locally authenticated user with low privileges can bypass Managed Application Security by leveraging an unspecified attack vector in Workspace Preferences, when it is enabled. As a result, the attacker can start applications that should be blocked...

7.8CVSS7.2AI score0.00466EPSS
SaveExploits0References2
Rows per page
Query Builder