CVE-2019-16382

An issue was discovered in Ivanti Workspace Control 10.3.110.0. One is able to bypass Ivanti's FileGuard folder protection by renaming the WMTemp work folder used by PowerGrid. A malicious PowerGrid XML file can then be created, after which the folder is renamed back to its original value. Also, CVE-2018-15591 exploitation can consequently be achieved by using PowerGrid with the /SEE parameter to execute the arbitrary command specified in the XML file.

• https://forums.ivanti.com/s/article/Security-Alert-Ivanti-Workspace-Control-September-2019Patch, Vendor Advisory
• https://twitter.com/jmoosdijkThird Party Advisory
• https://forums.ivanti.com/s/article/Security-Alert-Ivanti-Workspace-Control-September-2019Patch, Vendor Advisory
• https://twitter.com/jmoosdijkThird Party Advisory

Published

Mar 19, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-16371LogMeIn LastPass before 4.33.0 allows attackers to construct…8.2
• CVE-2019-16374Pega Platform 8.2.1 allows LDAP injection because a username…9.8
• CVE-2019-16375An issue was discovered in Open Ticket Request System (OTRS)…5.4
• CVE-2019-16377The makandra consul gem through 1.0.2 for Ruby has Incorrect…9.8
• CVE-2019-16378OpenDMARC through 1.3.2 and 1.4.x through 1.4.0-Beta1 is pro…9.8
• CVE-2019-1638A vulnerability in the Cisco Webex Network Recording Player …7.8
• CVE-2019-16383MOVEit.DMZ.WebApi.dll in Progress MOVEit Transfer 2018 SP2 b…9.4
• CVE-2019-16384Cybele Thinfinity VirtualUI 2.5.17.2 allows ../ path travers…6.5
• CVE-2019-16385Cybele Thinfinity VirtualUI 2.5.17.2 allows HTTP response sp…6.1
• CVE-2019-16386PEGA Platform 7.x and 8.x is vulnerable to Information discl…4.3
• CVE-2019-16387PEGA Platform 8.3.0 is vulnerable to a direct prweb/sso/rand…8.1
• CVE-2019-16388PEGA Platform 8.3.0 is vulnerable to Information disclosure …4.3