8.2
High
CVE-2024-44105 Cleartext transmission of sensitive information in the management console of Ivanti Workspace Control before version…
Description
Cleartext transmission of sensitive information in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to obtain OS credentials.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Workspace Control 10.19 | earliest → < 10.19.0.0 | 10.19.0.0 |
| Automation | Versions not published |
References
- forums.ivanti.com forums.ivanti.com
Timeline
- Published
- Last modified
Other CVEs of Workspace Control
The 10 CVEs of Workspace Control →
CVE-2025-5353
A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt…
8.8
High
CVE-2025-22463
A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt…
7.3
High
CVE-2025-22455
A hardcoded key in Ivanti Workspace Control before version 10.19.0.0 allows a local authenticated attacker to decrypt…
8.8
High
CVE-2024-8496
Under specific circumstances, insecure permissions in Ivanti Workspace Control before version 10.18.40.0 allows a…
7.8
High