CVE-2018-15593

概要

参考情報

• packetstormsecurity.com/files/149616/Ivanti-Workspace-Control-Registry-Stored-Credentials.html · Third Party Advisory
• seclists.org/fulldisclosure/2018/Oct/3 · Mailing List
• community.ivanti.com/docs/DOC-69693 · Vendor Advisory
• seclists.org/bugtraq/2018/Oct/5 · Mailing List
• securify.nl/en/advisory/SFY20180804/stored-credentials-ivanti-workspace-control-can-be-retrieved-from-registry.html · Third Party Advisory

workspace control のその他の脆弱性

• CVE-2025-5353高 7.8A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt stored SQL credential…
• CVE-2025-22463高 7.3A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt the stored environmen…
• CVE-2025-22455高 7.8A hardcoded key in Ivanti Workspace Control before version 10.19.0.0 allows a local authenticated attacker to decrypt stored SQL credentials…
• CVE-2024-8496高 7.8Under specific circumstances, insecure permissions in Ivanti Workspace Control before version 10.18.40.0 allows a local authenticated attack…
• CVE-2024-8012高 7.8An authentication bypass weakness in the message broker service of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local…