Privilege Escalation Vulnerability in Ivanti Workspace Control
CVE-2021-36235

7.8HIGH

Key Information:

Vendor

Ivanti
Status
Workspace Control
Vendor
CVE Published:
1 September 2021

What is CVE-2021-36235?

A vulnerability exists in Ivanti Workspace Control prior to version 10.6.30.0, where a locally authenticated user with minimal privileges can exploit a weakness to bypass File and Folder Security controls. This flaw allows the attacker to launch applications with elevated privileges, potentially compromising the security of the system. The attack leverages an unspecified vector, enabling users with low-level access to perform unauthorized actions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://forums.ivanti.com/s/article/A-locally-authenticat...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.