{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-105813","assignerOrgId":"3c1d8aa1-5a33-4ea4-8992-aadd6440af75","state":"PUBLISHED","assignerShortName":"ivanti","dateReserved":"2026-10-05T21:04:13.886Z","datePublished":"2026-11-10T15:24:52.995Z","dateUpdated":"2026-11-10T15:24:52.995Z"},"containers":{"cna":{"providerMetadata":{"orgId":"3c1d8aa1-5a33-4ea4-8992-aadd6440af75","shortName":"ivanti","dateUpdated":"2026-11-10T15:24:52.995Z"},"problemTypes":[{"descriptions":[{"lang":"en","cweId":"CWE-312","description":"CWE-312 Cleartext storage of sensitive information","type":"CWE"}]}],"impacts":[{"capecId":"CAPEC-37","descriptions":[{"lang":"en","value":"CAPEC-37 Retrieve Embedded Sensitive Data"}]}],"affected":[{"vendor":"Ivanti","product":"User Workspace Manager","versions":[{"status":"unaffected","version":"2026.4"}],"defaultStatus":"affected"}],"descriptions":[{"lang":"en","value":"Cleartext storage of sensitive information in Ivanti UWM before version 2026.4 allows a local authenticated attacker to retrieve another local user's session token.","supportingMedia":[{"type":"text/html","base64":false,"value":"Cleartext storage of sensitive information in Ivanti UWM before version 2026.4 allows a local authenticated attacker to retrieve another local user's session token."}]}],"references":[{"url":"https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-User-Workspace-Manager-CVE-2026-105813?language=en_US"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW","baseSeverity":"MEDIUM","baseScore":6.3,"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L"}}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 1.0.5"}}}}