Security Bypass in Ivanti Workspace Control by Local Authenticated Users

CVE-2019-10885

What is CVE-2019-10885?

A vulnerability exists in Ivanti Workspace Control prior to version 10.3.90.0, where local authenticated users with limited privileges can exploit the system by resetting the session context. This action permits them to circumvent security features implemented for the session, potentially compromising the security of the application and the data it handles. It exposes the system to manipulation and unauthorized actions by users who should otherwise be restricted.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References