Application Security Bypass in Ivanti Workspace Control

CVE-2019-19675

Summary

In Ivanti Workspace Control versions prior to 10.3.180.0, a vulnerability exists that allows a locally authenticated user with limited privileges to circumvent Managed Application Security settings. This can occur when the specific Workspace Preferences feature is activated. By exploiting an unspecified attack vector, an attacker can launch applications that are intended to be restricted, potentially leading to unauthorized access and security breaches.

References