Workspace Control runs a service named Ivanti Workspace Control PE that exposes a Named Pipe. It was found that this feature can be abused by a local attacker to run any application with Administrator privileges.įigure 1: Administrators can add Administrator rights to applications Details This is a powerful feature that allows a low privileged user to run an application with Administrator privileges. Workspace Control contains a feature named Dynamic Privileges that provides the possibility to add or remove Administrator privileges to a process. Ivanti Workspace Control (formerly known as RES ONE Workspace) is a User Environment Management solution. This issue was resolved in Ivanti Workspace Control version 10.3.10.0. This issue was successfully verified on Ivanti Workspace Control version 10.2.700.1 & 10.2.950.0. This thread connects to a Named Pipe and sends an instruction to a service to launch an attacker-defined application with elevated privileges.ĬVE-2018-15592 DOC-69692 - A locally authenticated user with low privileges can run processes with elevated privileges by leveraging an unspecified attack vector Tested versions
This issue can be exploited by spawning a new Composer process, injecting a malicious thread in this process. Ivanti is headquartered in Salt Lake City, Utah, and has offices all over the world.It was found that Ivanti Workspace Control allows a local (unprivileged) attacker to run arbitrary commands with Administrator privileges.
The company also helps organizations leverage modern technology in the warehouse and across the supply chain to improve delivery without modifying backend systems. From PCs to mobile devices, VDI, and the data center, Ivanti discovers IT assets on-premises and in the cloud, improves IT service delivery, and reduces risk with insights and automation. Ivanti unifies IT and Security Operations to better manage and secure the digital workplace. Ivanti User Workspace Manager, including Ivanti File Director and Ivanti Environment Manager, with support for Microsoft Intune and Autopilot is available now. It also enables faster logons and personalized desktops as well as the assured compliance needed to adhere to corporate and industry-based mandates. By decoupling user settings from the OS, Environment Manager enables IT to supply portability for users across devices. With Ivanti Environment Manager, IT can deliver a personal desktop for every user while applying contextual policies on-demand so that users get exactly what they need to do their jobs. This eradicates data sprawl and helps ensure the centralization of user files for simplified search, compliance and eDiscovery, and helps reduce on-premises datacenter storage costs. Using the Ivanti File Director OneDrive for Business connector, files can also be effortlessly migrated using the storage provided in Office 365’s OneDrive for Business. With Ivanti File Director, files are synchronized to the endpoint so that users can access all their files in the location where they expect them, regardless of the device or OS they use to save or access them. Ivanti User Workspace Manager, including Ivanti File Director and Ivanti Environment Manager, delivers easily customizable device management capabilities to support workforce productivity as well as governance control. It provides users with all of the files and personalization they expect on their new systems with the policy control IT needs to remain compliant and hands-free.” It takes migrations and hardware refreshes that last mile leveraging Microsoft’s latest onboarding technology for corporate devices. “While Microsoft Intune simplifies the migration of the operating system and applications, some critical components that users expect, and IT requires, including the syncing of files, user settings and Group Policies, can now be managed by Ivanti User Workspace Manager.
#Ivanti user workspace manager windows#
“Today’s data workers demand flexibility and expect consistent access to the files they need to perform their jobs, particularly when IT migrates them to Windows 10,” said Jon Rolls, Vice President, User Workspace Management Products at Ivanti. The solution will be showcased during Microsoft Ignite, September 24-28 in booth #1600.
#Ivanti user workspace manager windows 10#
Leveraging this new support, the Ivanti solution automatically syncs device files, user policies and personalization onto new Windows 10 PCs delivered direct from the supplier to the end user, improving workforce productivity and minimizing IT intervention. Ivanti, the company that unifies IT to better manage and secure the digital workplace, announced new integration between Ivanti® User Workspace Manager and Microsoft Intune and Autopilot.
0 kommentar(er)
