Описание
An issue was discovered in Ivanti Workspace Control before 10.3.90.0. Local authenticated users with low privileges in a Workspace Control managed session can bypass Workspace Control security features configured for this session by resetting the session context.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 10.3.90.0 (исключая)
cpe:2.3:a:ivanti:workspace_control:*:*:*:*:*:*:*:*
EPSS
Процентиль: 38%
0.00166
Низкий
7.8 High
CVSS3
4.6 Medium
CVSS2
Дефекты
CWE-264
Связанные уязвимости
CVSS3: 7.8
github
больше 3 лет назад
An issue was discovered in Ivanti Workspace Control before 10.3.90.0. Local authenticated users with low privileges in a Workspace Control managed session can bypass Workspace Control security features configured for this session by resetting the session context.
EPSS
Процентиль: 38%
0.00166
Низкий
7.8 High
CVSS3
4.6 Medium
CVSS2
Дефекты
CWE-264