Privilege Escalation Vulnerability in Ivanti Workspace Control

CVE-2021-36235

What is CVE-2021-36235?

A vulnerability exists in Ivanti Workspace Control prior to version 10.6.30.0, where a locally authenticated user with minimal privileges can exploit a weakness to bypass File and Folder Security controls. This flaw allows the attacker to launch applications with elevated privileges, potentially compromising the security of the system. The attack leverages an unspecified vector, enabling users with low-level access to perform unauthorized actions.

References