PT-2020-12670 · Microsoft+1 · Sccm+1

Published 2020-04-04 · Updated 2021-07-21 · CVE-2020-11533

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Ivanti Workspace Control versions prior to 10.4.30.0

Description The issue allows local users to obtain sensitive information, specifically keying material, when SCCM integration is enabled.

Recommendations For versions prior to 10.4.30.0, update to version 10.4.30.0 or later to resolve the issue.

Fix

Related Identifiers

CVE-2020-11533

Affected Products

Ivanti Workspace Control

Sccm

References · 3

• https://forums.ivanti.com/s/article/A-locally-authenticated-user-with-low-privileges-can-recover-keying-material-due-to-an-unspecified-attack-vector · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-11533 · Security Note
• https://osv.dev/vulnerability/CVE-2020-11533 · Vendor Advisory