CVE-2018-15593: An issue was discovered in Ivanti Workspace Control before 10.3.10.0 and RES One Workspace

High severity · published Oct 15, 2018

CVE-2018-15593

An issue was discovered in Ivanti Workspace Control before 10.3.10.0 and RES One Workspace

7.8

CVSS

EPSS

On KEV

Description

An issue was discovered in Ivanti Workspace Control before 10.3.10.0 and RES One Workspace. A local authenticated user can decrypt the encrypted datastore or relay server password by leveraging an unspecified attack vector.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack vector

Local

Complexity

Low

Privileges

Low

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)1.0% · higher than 64% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Workspace Control · Ivanti

before 10.3.10.0 · source: NVD

Affected product

Workspace Control

Ivanti

All Workspace Control CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2018-15593

CVE.org

https://www.cve.org/CVERecord?id=CVE-2018-15593

Third Party Advisory

http://packetstormsecurity.com/files/149616/Ivanti-Workspace-Control-Registry-Stored-Credentials.html

Mailing List

http://seclists.org/fulldisclosure/2018/Oct/3

Vendor Advisory

https://community.ivanti.com/docs/DOC-69693

Mailing List

https://seclists.org/bugtraq/2018/Oct/5

Third Party Advisory

https://www.securify.nl/en/advisory/SFY20180804/stored-credentials-ivanti-workspace-control-can-be-retrieved-from-registry.html