Security Bypass in Ivanti Workspace Control by Local Authenticated Users
CVE-2019-10885
7.8HIGH
What is CVE-2019-10885?
A vulnerability exists in Ivanti Workspace Control prior to version 10.3.90.0, where local authenticated users with limited privileges can exploit the system by resetting the session context. This action permits them to circumvent security features implemented for the session, potentially compromising the security of the application and the data it handles. It exposes the system to manipulation and unauthorized actions by users who should otherwise be restricted.