CVE-2018-15591: High severity ivanti workspace control vulnerability
Published Oct 15, 2018
·Updated
An issue was discovered in Ivanti Workspace Control before 10.3.10.0 and RES One Workspace. A local authenticated user can bypass Application Whitelisting restrictions to execute arbitrary code by leveraging multiple unspecified attack vectors.
Affected Software
1 affected component
Ivanti Workspace Control<10.3.10.0
Event History
Oct 15, 2018
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID of this issue?
The vulnerability ID is CVE-2018-15591.
2
What is the description of this vulnerability?
The vulnerability allows a local authenticated user to bypass Application Whitelisting restrictions and execute arbitrary code by leveraging multiple unspecified attack vectors.
3
What is the severity level of CVE-2018-15591?
The severity level of CVE-2018-15591 is high with a CVSS score of 7.8.
4
What software versions are affected by this vulnerability?
Ivanti Workspace Control versions up to but excluding 10.3.10.0 are affected.
5
How can I mitigate this vulnerability?
To mitigate this vulnerability, it is recommended to update to Ivanti Workspace Control version 10.3.10.0 or later.