8.8
High
CVE-2024-44106 Insufficient server-side controls in the management console of Ivanti Workspace Control before version 2025.2…
Description
Insufficient server-side controls in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to escalate their privileges.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Workspace Control 10.19 | earliest → < 10.19.0.0 | 10.19.0.0 |
| Automation | Versions not published |
References
- forums.ivanti.com forums.ivanti.com
Timeline
- Published
- Last modified
Other CVEs of Workspace Control
The 10 CVEs of Workspace Control →
CVE-2025-5353
A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt…
8.8
High
CVE-2025-22463
A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt…
7.3
High
CVE-2025-22455
A hardcoded key in Ivanti Workspace Control before version 10.19.0.0 allows a local authenticated attacker to decrypt…
8.8
High
CVE-2024-8496
Under specific circumstances, insecure permissions in Ivanti Workspace Control before version 10.18.40.0 allows a…
7.8
High