What is the severity of CVE-2019-16382?

The severity of CVE-2019-6382 is critical, with a score of 9.8 out of 10.

What is the affected software for CVE-2019-16382?

The affected software for CVE-2019-16382 is Ivanti Workspace Control version 10.3.110.0.

How can one bypass Ivanti's FileGuard folder protection in CVE-2019-16382?

One can bypass Ivanti's FileGuard folder protection in CVE-2019-16382 by renaming the WMTemp work folder used by PowerGrid and creating a malicious PowerGrid XML file.

What are the recommended solutions for CVE-2019-16382?

The recommended solutions for CVE-2019-16382 are to apply the necessary patches or updates provided by Ivanti, and closely monitor any unauthorized or suspicious activities.

Vulnerability/
CVE-2019-16382

critical

9.8

19/3/2020

5/8/2024

CVE-2019-16382

First published: Thu Mar 19 2020(Updated: )

An issue was discovered in Ivanti Workspace Control 10.3.110.0. One is able to bypass Ivanti's FileGuard folder protection by renaming the WMTemp work folder used by PowerGrid. A malicious PowerGrid XML file can then be created, after which the folder is renamed back to its original value. Also, CVE-2018-15591 exploitation can consequently be achieved by using PowerGrid with the /SEE parameter to execute the arbitrary command specified in the XML file.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Ivanti Workspace Control	=10.3.110.0

Remedy

https://forums.ivanti.com/s/article/Security-Alert-Ivanti-Workspace-Control-September-2019

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2019-16382?
The severity of CVE-2019-6382 is critical, with a score of 9.8 out of 10.
What is the affected software for CVE-2019-16382?
The affected software for CVE-2019-16382 is Ivanti Workspace Control version 10.3.110.0.
How can one bypass Ivanti's FileGuard folder protection in CVE-2019-16382?
One can bypass Ivanti's FileGuard folder protection in CVE-2019-16382 by renaming the WMTemp work folder used by PowerGrid and creating a malicious PowerGrid XML file.
What are the recommended solutions for CVE-2019-16382?
The recommended solutions for CVE-2019-16382 are to apply the necessary patches or updates provided by Ivanti, and closely monitor any unauthorized or suspicious activities.
Where can I find more information about CVE-2019-16382?
More information about CVE-2019-16382 can be found at the Ivanti forums (https://forums.ivanti.com/s/article/Security-Alert-Ivanti-Workspace-Control-September-2019) and on Twitter (https://twitter.com/jmoosdijk).

collector/nvd-index
agent/severity
agent/author
agent/type
agent/references
agent/event
agent/description
agent/last-modified-date
agent/remedy
agent/softwarecombine
agent/first-publish-date
agent/tags
collector/mitre-cve
source/MITRE
vendor/ivanti
canonical/ivanti workspace control
version/ivanti workspace control/10.3.110.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.