Security Bypass in Ivanti Workspace Control by Local Authenticated Users

CVE-2019-10885

Summary

A vulnerability exists in Ivanti Workspace Control prior to version 10.3.90.0, where local authenticated users with limited privileges can exploit the system by resetting the session context. This action permits them to circumvent security features implemented for the session, potentially compromising the security of the application and the data it handles. It exposes the system to manipulation and unauthorized actions by users who should otherwise be restricted.

References