CVE-2018-15592

Mô tả

Tham khảo

• packetstormsecurity.com/files/149615/Ivanti-Workspace-Control-Named-Pipe-Privilege-Escalation.html · Third Party Advisory
• seclists.org/fulldisclosure/2018/Oct/1 · Mailing List
• community.ivanti.com/docs/DOC-69692 · Vendor Advisory
• seclists.org/bugtraq/2018/Oct/7 · Mailing List
• securify.nl/en/advisory/SFY20180802/ivanti-workspace-control-local-privilege-escalation-via-named-pipe.html · Exploit

Lỗ hổng khác của workspace control

• CVE-2025-5353CAO 7.8A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt stored SQL credential…
• CVE-2025-22463CAO 7.3A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt the stored environmen…
• CVE-2025-22455CAO 7.8A hardcoded key in Ivanti Workspace Control before version 10.19.0.0 allows a local authenticated attacker to decrypt stored SQL credentials…
• CVE-2024-8496CAO 7.8Under specific circumstances, insecure permissions in Ivanti Workspace Control before version 10.18.40.0 allows a local authenticated attack…
• CVE-2024-8012CAO 7.8An authentication bypass weakness in the message broker service of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local…