8.8
High
CVE-2022-44569 A locally authenticated attacker with low privileges can bypass authentication due to insecure inter-process…
Description
A locally authenticated attacker with low privileges can bypass authentication due to insecure inter-process communication.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Automation 2023.4 | earliest → < 2023.4 | 2023.4 |
References
- help.ivanti.com help.ivanti.com
Timeline
- Published
- Last modified
Other CVEs of Automation
The 8 CVEs of Automation →
CVE-2024-9845
Under specific circumstances, insecure permissions in Ivanti Automation before version 2024.4.0.1 allows a local…
7.8
High
CVE-2024-38656
Argument injection in Ivanti Connect Secure before version 22.7R2.2 and 9.1R18.9 and Ivanti Policy Secure before version…
9.1
Critical
CVE-2024-8320
Missing authentication in Network Isolation of Ivanti EPM before 2022 SU6, or the 2024 September update allows a…
5.3
Medium
CVE-2024-44106
Insufficient server-side controls in the management console of Ivanti Workspace Control before version 2025.2…
8.8
High