Vulnerability Description
An issue was discovered in Ivanti Workspace Control before 10.6.30.0. A locally authenticated user with low privileges can bypass File and Folder Security by leveraging an unspecified attack vector. As a result, the attacker can start applications with elevated privileges.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ivanti | Workspace Control | < 10.6.30.0 |
References
- https://forums.ivanti.com/s/article/A-locally-authenticated-user-with-low-privilVendor Advisory
- https://forums.ivanti.com/s/article/A-locally-authenticated-user-with-low-privilVendor Advisory
FAQ
What is CVE-2021-36235?
CVE-2021-36235 is a vulnerability with a CVSS score of 7.8 (HIGH). An issue was discovered in Ivanti Workspace Control before 10.6.30.0. A locally authenticated user with low privileges can bypass File and Folder Security by leveraging an unspecified attack vector. A...
How severe is CVE-2021-36235?
CVE-2021-36235 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-36235?
Check the references section above for vendor advisories and patch information. Affected products include: Ivanti Workspace Control.