CVE-2019-19138

概要

参考情報

• forums.ivanti.com/s/article/Enhanced-Security-Update-IWC-components · Vendor Advisory
• forums.ivanti.com/s/article/Security-Alert-Ivanti-RES-Workspace-Manager-November-2019 · Permissions Required

workspace control のその他の脆弱性

• CVE-2025-5353高 7.8A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt stored SQL credential…
• CVE-2025-22463高 7.3A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt the stored environmen…
• CVE-2025-22455高 7.8A hardcoded key in Ivanti Workspace Control before version 10.19.0.0 allows a local authenticated attacker to decrypt stored SQL credentials…
• CVE-2024-8496高 7.8Under specific circumstances, insecure permissions in Ivanti Workspace Control before version 10.18.40.0 allows a local authenticated attack…
• CVE-2024-8012高 7.8An authentication bypass weakness in the message broker service of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local…