Ivanti Workspace Control Application PowerGrid SEE Whitelist Bypass
Posted by deepcore on October 2, 2018 – 1:05 pm
It was found that the PowerGrid application can be used to run arbitrary commands via the /SEE command line option. An attacker can abuse this issue to bypass Application Whitelisting in order to run arbitrary code on the target machine. This issue was successfully verified on Ivanti Workspace Control version 10.2.950.0.
Post a reply
You must be logged in to post a comment.