CVE-2019-19675: High severity ivanti workspace control vulnerability
In Ivanti Workspace Control before 10.3.180.0. a locally authenticated user with low privileges can bypass Managed Application Security by leveraging an unspecified attack vector in Workspace Preferences, when it is enabled. As a result, the attacker can start applications that should be blocked.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-19675?
CVE-2019-19675 is a vulnerability in Ivanti Workspace Control before version 10.3.180.0 that allows a locally authenticated user with low privileges to bypass Managed Application Security.
How does CVE-2019-19675 work?
CVE-2019-19675 leverages an unspecified attack vector in Workspace Preferences, when enabled, to bypass Managed Application Security and allow the attacker to start applications that should be blocked.
Is there a fix for CVE-2019-19675?
Yes, upgrading to Ivanti Workspace Control version 10.3.180.0 or later fixes the vulnerability.
What is the severity of CVE-2019-19675?
CVE-2019-19675 has a severity value of 7.8, which is considered high.
Where can I find more information about CVE-2019-19675?
More information about CVE-2019-19675 can be found at the following link: https://forums.ivanti.com/s/article/Locally-authenticated-user-can-bypass-File-and-Folder-Security-by-leveraging-an-unspecified-attack-vector