Bypassing Workspace Control Security Features via Session Context Reset

Bypassing Workspace Control Security Features via Session Context Reset

CVE-2019-10885 · MEDIUM Severity

AV:L/AC:L/AU:N/C:P/I:P/A:P

An issue was discovered in Ivanti Workspace Control before 10.3.90.0. Local authenticated users with low privileges in a Workspace Control managed session can bypass Workspace Control security features configured for this session by resetting the session context.

Learn more about our Cis Benchmark Audit For Google Workspace.