Sign in

8.8 High

CVE-2024-44106 Insufficient server-side controls in the management console of Ivanti Workspace Control before version 2025.2…

Description

Insufficient server-side controls in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to escalate their privileges.

Affected products and versions

Product	Affected versions	Fixed in
Workspace Control 10.19	earliest → < 10.19.0.0	10.19.0.0
Automation	Versions not published

The 10 CVEs of Workspace Control →

CVE-2025-5353 A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt… 8.8 High CVE-2025-22463 A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt… 7.3 High CVE-2025-22455 A hardcoded key in Ivanti Workspace Control before version 10.19.0.0 allows a local authenticated attacker to decrypt… 8.8 High CVE-2024-8496 Under specific circumstances, insecure permissions in Ivanti Workspace Control before version 10.18.40.0 allows a… 7.8 High

Do you use Workspace Control?

Track this CVE Watch Workspace Control Check my SBOMs

cveye.io/en/cve/CVE-2024-44106

Timeline

Published September 10, 2024
Last modified June 12, 2025

References

forums.ivanti.com forums.ivanti.com

Track this CVE