CVE-2018-15590

5.5MEDIUM

Key Information:

Vendor
Ivanti
Status
Workspace Control
Vendor
CVE Published:
15 October 2018

Summary

An issue was discovered in Ivanti Workspace Control before 10.3.0.0 and RES One Workspace, when file and folder security are configured. A local authenticated user can bypass file and folder security restriction by leveraging an unspecified attack vector.

References

https://seclists.org/bugtraq/2018/Oct/10
mailing-listx_refsource_BUGTRAQ
https://community.ivanti.com/docs/DOC-69682
x_refsource_CONFIRM
https://www.securify.nl/en/advisory/SFY20180803/ivanti-wo...
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.