Ivanti Workspace Control和RES One Workspace 安全漏洞

http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-201810-699

Ivanti Workspace Control（前称RES One Workspace）是美国Ivanti公司的一套工作区控制软件。该软件包括用户管理、应用管理和报告管理等功能。 Ivanti Workspace Control 10.3.10.0之前版本和RES One Workspace中存在安全漏洞。本地攻击者可利用该漏洞绕过应用程序白名单限制，进而执行任意代码。

来源:packetstormsecurity.com

链接:http://packetstormsecurity.com/files/149614/Ivanti-Workspace-Control-Application-PowerGrid-SEE-Whitelist-Bypass.html


来源:seclists.org

链接:http://seclists.org/fulldisclosure/2018/Oct/4


来源:community.ivanti.com

链接:https://community.ivanti.com/docs/DOC-69684


来源:seclists.org

链接:https://seclists.org/bugtraq/2018/Oct/8


来源:www.securify.nl

链接:https://www.securify.nl/en/advisory/SFY20180806/ivanti-workspace-control-application-whitelist-bypass-via-powergrid-_see-command-line-argument.html