First published: Sat Apr 04 2020(Updated: )
Ivanti Workspace Control before 10.4.30.0, when SCCM integration is enabled, allows local users to obtain sensitive information (keying material).
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Ivanti Workspace Control | <10.4.30.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this Ivanti Workspace Control vulnerability is CVE-2020-11533.
Ivanti Workspace Control before 10.4.30.0 with SCCM integration enabled allows local users to obtain sensitive information (keying material), putting users at risk.
The severity level of CVE-2020-11533 is medium with a severity value of 5.5.
To fix the Ivanti Workspace Control vulnerability CVE-2020-11533, update to version 10.4.30.0 or later.
You can find more information about the Ivanti Workspace Control vulnerability CVE-2020-11533 on the Ivanti forums: https://forums.ivanti.com/s/article/A-locally-authenticated-user-with-low-privileges-can-recover-keying-material-due-to-an-unspecified-attack-vector