CVE-2019-16382 - An issue was discovered in Ivanti Workspace Control 10.3.110.0

Back Back to CVE browser

CRITICAL

An issue was discovered in Ivanti Workspace Control 10.3.110.0

Published Mar 19, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 2.88%

Description

An issue was discovered in Ivanti Workspace Control 10.3.110.0. One is able to bypass Ivanti's FileGuard folder protection by renaming the WMTemp work folder used by PowerGrid. A malicious PowerGrid XML file can then be created, after which the folder is renamed back to its original value. Also, CVE-2018-15591 exploitation can consequently be achieved by using PowerGrid with the /SEE parameter to execute the arbitrary command specified in the XML file.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-7132
Advisory
https://forums.ivanti.com/s/article/Security-Alert-Ivanti-Workspace-Control-September-2019
x_refsource_CONFIRMPatchVendor Advisory
https://twitter.com/jmoosdijk
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-7132		Advisory
https://forums.ivanti.com/s/article/Security-Alert-Ivanti-Workspace-Control-September-2019		x_refsource_CONFIRMPatchVendor Advisory
https://twitter.com/jmoosdijk		x_refsource_MISCThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 19, 2020

Updated Aug 5, 2024

Reserved Sep 17, 2019

Link CVE-2019-16382

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-16382

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Mar 19, 2020

Updated Aug 5, 2024

Link EUVD-2019-7132

GitHub

No data