8.8
Élevée
CVE-2024-44104 An incorrectly implemented authentication scheme that is subjected to a spoofing attack in the management console of…
Description
An incorrectly implemented authentication scheme that is subjected to a spoofing attack in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to escalate their privileges.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Workspace Control 10.19 | premières → < 10.19.0.0 | 10.19.0.0 |
| Automation | Versions non publiées |
Autres CVE de Workspace Control
Les 10 CVE de Workspace Control →
CVE-2025-5353
A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt…
8.8
Élevée
CVE-2025-22463
A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt…
7.3
Élevée
CVE-2025-22455
A hardcoded key in Ivanti Workspace Control before version 10.19.0.0 allows a local authenticated attacker to decrypt…
8.8
Élevée
CVE-2024-8496
Under specific circumstances, insecure permissions in Ivanti Workspace Control before version 10.18.40.0 allows a…
7.8
Élevée