CVE record · 2 sources
CVE-2026-105813
CVSS 6.3Cleartext storage of sensitive information in Ivanti UWM before version 2026.4 allows a local authenticated attacker to retrieve another local user's…
- Vendor
- Ivanti
- Product
- User Workspace Manager
- CVSS v3.1
- 6.3 AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
- Weakness
- CWE-312
Coverage
2Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
November 2026 Security Update
Ivanti releases standard security patches on the second Tuesday of every month. In today’s rapidly evolving technology and threat landscape, we believe responsible transparency should be a cornerstone of any product security…
-
Cleartext storage of sensitive information in Ivanti UWM before version 2026.4 allows a local authenticated attacker to retrieve another local user's…
Cleartext storage of sensitive information in Ivanti UWM before version 2026.4 allows a local authenticated attacker to retrieve another local user's session token.