CVE-2019-19675 : What You Need to Know

Ivanti Workspace Control versions prior to 10.3.180.0 are vulnerable to a bypass of Managed Application Security by a locally authenticated user with limited privileges. This can be accomplished by exploiting an attack vector in Workspace Preferences, specifically when it is enabled. Consequently, the attacker gains the ability to launch applications that are intended to be blocked.

Understanding CVE-2019-19675

In Ivanti Workspace Control before version 10.3.180.0, a security vulnerability allows a locally authenticated user with low privileges to bypass Managed Application Security, potentially leading to unauthorized application launches.

What is CVE-2019-19675?

This CVE refers to a specific vulnerability in Ivanti Workspace Control that enables a user with restricted privileges to bypass Managed Application Security, granting unauthorized access to launch blocked applications.

The Impact of CVE-2019-19675

The vulnerability poses a significant security risk as it allows an attacker to circumvent application security measures and execute applications that are meant to be restricted, potentially leading to unauthorized access and data breaches.

Technical Details of CVE-2019-19675

Ivanti Workspace Control before version 10.3.180.0 is susceptible to a security flaw that enables unauthorized application launches.

Vulnerability Description

The vulnerability allows a locally authenticated user with limited privileges to bypass Managed Application Security by exploiting an attack vector in Workspace Preferences.

Affected Systems and Versions

Product: Ivanti Workspace Control
Versions affected: Prior to 10.3.180.0

Exploitation Mechanism

The attack vector lies within Workspace Preferences, specifically when enabled, granting the attacker the ability to launch applications that are supposed to be blocked.

Mitigation and Prevention

To address CVE-2019-19675, immediate actions and long-term security practices are crucial.

Immediate Steps to Take

Update Ivanti Workspace Control to version 10.3.180.0 or later to mitigate the vulnerability.
Monitor and restrict user privileges to minimize the risk of unauthorized access.

Long-Term Security Practices

Regularly review and update security configurations to prevent similar vulnerabilities.
Conduct security training for users to enhance awareness of potential threats.

Patching and Updates

Apply security patches and updates provided by Ivanti to ensure the latest security measures are in place.