Ivanti Workspace Control和RES One Workspace 安全漏洞

http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-201810-698

Ivanti Workspace Control（前称RES One Workspace）是美国Ivanti公司的一套工作区控制软件。该软件包括用户管理、应用管理和报告管理等功能。 Ivanti Workspace Control 10.3.0.0之前版本和RES One Workspace中存在安全漏洞。本地攻击者可利用该漏洞绕过文件和文件夹的安全限制。

来源:packetstormsecurity.com

链接:http://packetstormsecurity.com/files/149617/Ivanti-Workspace-Control-UNC-Path-Data-Security-Bypass.html


来源:seclists.org

链接:http://seclists.org/fulldisclosure/2018/Oct/2


来源:community.ivanti.com

链接:https://community.ivanti.com/docs/DOC-69682


来源:seclists.org

链接:https://seclists.org/bugtraq/2018/Oct/10


来源:www.securify.nl

链接:https://www.securify.nl/en/advisory/SFY20180803/ivanti-workspace-control-data-security-bypass-via-localhost-unc-path.html