Privilege escalation in Ivanti Workspace Control
CVE-2019-17066
In Ivanti WorkSpace Control before 10.4.40.0, a user can elevate rights on the system by hijacking certain user registries. This is possible because pwrgrid.exe first checks the Current User registry hives (HKCU) when starting an application with elevated rights.
Vulnerability class: Privilege Escalation
EPSS: 0.005 (38.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Ivanti Workspace_control
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2019-17066?
- CVE-2019-17066 is a high-severity vulnerability in Ivanti Workspace Control, classified under Improper Privilege Management. CVSS score: 7.8/10. Published 2020-05-18.
- How severe is CVE-2019-17066?
- High severity. CVSS v3 base score is 7.8 out of 10.