What is CVE-2019-17066?

CVE-2019-17066 is a high-severity vulnerability in Ivanti Workspace_control, classified under Improper Privilege Management. CVSS score: 7.8/10. Published 2020-05-18.

How severe is CVE-2019-17066?

High severity. CVSS v3 base score is 7.8 out of 10.

Privilege escalation in Ivanti Workspace_control

CVE-2019-17066

In Ivanti WorkSpace Control before 10.4.40.0, a user can elevate rights on the system by hijacking certain user registries. This is possible because pwrgrid.exe first checks the Current User registry hives (HKCU) when starting an applicati…

Vulnerability class: Privilege Escalation

EPSS: 0.005 (37.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Ivanti Workspace_control
N/a — versions n/a

Weakness classification (CWE)

CWE-269 — Improper Privilege Management

References

cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2019-17066?: CVE-2019-17066 is a high-severity vulnerability in Ivanti Workspace_control, classified under Improper Privilege Management. CVSS score: 7.8/10. Published 2020-05-18.
How severe is CVE-2019-17066?: High severity. CVSS v3 base score is 7.8 out of 10.