Skip to content
fr Sign in
8.8 High

CVE-2024-44104 An incorrectly implemented authentication scheme that is subjected to a spoofing attack in the management console of…

Description

An incorrectly implemented authentication scheme that is subjected to a spoofing attack in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to escalate their privileges.

Affected products and versions

Product Affected versions Fixed in
Workspace Control 10.19 earliest → < 10.19.0.0 10.19.0.0
Automation Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Workspace Control

The 10 CVEs of Workspace Control →
CVE-2025-5353 A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt… 8.8 High CVE-2025-22463 A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt… 7.3 High CVE-2025-22455 A hardcoded key in Ivanti Workspace Control before version 10.19.0.0 allows a local authenticated attacker to decrypt… 8.8 High CVE-2024-8496 Under specific circumstances, insecure permissions in Ivanti Workspace Control before version 10.18.40.0 allows a… 7.8 High
Track this CVE