{"id":"CVE-2022-21823","aliases":["EUVD-2022-26982","GHSA-w3jg-4hwp-p898"],"status":"published","title":"A insecure storage of sensitive information vulnerability exists in Ivanti Workspace Control ...","description":"A insecure storage of sensitive information vulnerability exists in Ivanti Workspace Control \u003c2021.2 (10.7.30.0) that could allow an attacker with locally authenticated low privileges to obtain key information due to an unspecified attack vector.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00361,"percentile":0.30075,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-922"],"published":"2022-01-07T22:39:51Z","modified":"2026-06-17T04:27:03Z","products":[{"vendor":"ivanti","product":"workspace_control"}],"references":[{"url":"https://forums.ivanti.com/s/article/A-locally-authenticated-user-with-low-privileges-can-obtain-key-information-due-to-an-unspecified-attack-vector?language=en_US","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-21823"},{"url":"https://github.com/advisories/GHSA-w3jg-4hwp-p898"}],"sources":{"cve":[{"id":"CVE-2022-21823","description":"A insecure storage of sensitive information vulnerability exists in Ivanti Workspace Control \u003c2021.2 (10.7.30.0) that could allow an attacker with locally authenticated low privileges to obtain key information due to an unspecified attack vector.","status":"published","published":"2022-01-07T22:39:51Z","modified":"2024-08-03T02:53:36.259Z","cwes":["CWE-922"],"updated_at":"2026-11-02T14:34:28.707644Z"}],"euvd":[{"id":"EUVD-2022-26982","description":"A insecure storage of sensitive information vulnerability exists in Ivanti Workspace Control \u003c2021.2 (10.7.30.0) that could allow an attacker with locally authenticated low privileges to obtain key information due to an unspecified attack vector.","status":"published","published":"2022-01-07T22:39:51Z","modified":"2024-08-03T02:53:36Z","updated_at":"2026-11-03T03:25:53.384523Z"}],"ghsa":[{"id":"GHSA-w3jg-4hwp-p898","title":"A insecure storage of sensitive information vulnerability exists in Ivanti Workspace Control ...","description":"A insecure storage of sensitive information vulnerability exists in Ivanti Workspace Control \u003c2021.2 (10.7.30.0) that could allow an attacker with locally authenticated low privileges to obtain key information due to an unspecified attack vector.","status":"published","published":"2022-01-11T00:00:59Z","modified":"2023-02-03T05:04:15Z","cwes":["CWE-922"],"updated_at":"2026-11-02T14:53:30.880998Z"}],"nvd":[{"id":"CVE-2022-21823","description":"A insecure storage of sensitive information vulnerability exists in Ivanti Workspace Control \u003c2021.2 (10.7.30.0) that could allow an attacker with locally authenticated low privileges to obtain key information due to an unspecified attack vector.","status":"published","published":"2022-01-10T14:12:32.757Z","modified":"2026-06-17T04:27:03.12Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-922"],"updated_at":"2026-11-02T14:07:10.836864Z"}]}}