Skip to content
Sign in
8.2 High

CVE-2024-44105 Cleartext transmission of sensitive information in the management console of Ivanti Workspace Control before version…

Description

Cleartext transmission of sensitive information in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to obtain OS credentials.

Affected products and versions

Product Affected versions Fixed in
Workspace Control 10.19 earliest → < 10.19.0.0 10.19.0.0
Automation Versions not published

Other CVEs of Workspace Control

The 10 CVEs of Workspace Control →
CVE-2025-5353 A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt… 8.8 High CVE-2025-22463 A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt… 7.3 High CVE-2025-22455 A hardcoded key in Ivanti Workspace Control before version 10.19.0.0 allows a local authenticated attacker to decrypt… 8.8 High CVE-2024-8496 Under specific circumstances, insecure permissions in Ivanti Workspace Control before version 10.18.40.0 allows a… 7.8 High
Track this CVE