Description
Cleartext storage of sensitive information in Ivanti UWM before version 2026.4 allows a local authenticated attacker to retrieve another local user's session token.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ivanti | User Workspace Manager | patch: 2026.4 | — |