CVE-2026-105813 | BDVDB-2026-402942 Detail
IvantiUser Workspace Manager
Description#
Cleartext storage of sensitive information in Ivanti UWM before version 2026.4 allows a local authenticated attacker to retrieve another local user's session token.
Impact#
CAPEC-37 Retrieve Embedded Sensitive Data
Weaknesses#
- CWE-312 Cleartext storage of sensitive information
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.