7.8
High
CVE-2024-8012 An authentication bypass weakness in the message broker service of Ivanti Workspace Control before version 2025.2…
Description
An authentication bypass weakness in the message broker service of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to escalate their privileges.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Workspace Control 10.19 | earliest → < 10.19.0.0 | 10.19.0.0 |
| workspace_control | Versions not published |
References
- forums.ivanti.com forums.ivanti.com
Timeline
- Published
- Last modified
Other CVEs of Workspace Control
The 10 CVEs of Workspace Control →
CVE-2025-5353
A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt…
8.8
High
CVE-2025-22463
A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt…
7.3
High
CVE-2025-22455
A hardcoded key in Ivanti Workspace Control before version 10.19.0.0 allows a local authenticated attacker to decrypt…
8.8
High
CVE-2024-8496
Under specific circumstances, insecure permissions in Ivanti Workspace Control before version 10.18.40.0 allows a…
7.8
High