Home / os / bsd

Ivanti Workspace Control Application PowerGrid SEE Whitelist Bypass

Posted on 01 October 2018

It was found that the PowerGrid application can be used to run arbitrary commands via the /SEE command line option. An attacker can abuse this issue to bypass Application Whitelisting in order to run arbitrary code on the target machine. This issue was successfully verified on Ivanti Workspace Control version 10.2.950.0.

 

TOP