8.2
Élevée
CVE-2024-44105 Cleartext transmission of sensitive information in the management console of Ivanti Workspace Control before version…
Description
Cleartext transmission of sensitive information in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to obtain OS credentials.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Workspace Control 10.19 | premières → < 10.19.0.0 | 10.19.0.0 |
| Automation | Versions non publiées |
Autres CVE de Workspace Control
Les 10 CVE de Workspace Control →
CVE-2025-5353
A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt…
8.8
Élevée
CVE-2025-22463
A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt…
7.3
Élevée
CVE-2025-22455
A hardcoded key in Ivanti Workspace Control before version 10.19.0.0 allows a local authenticated attacker to decrypt…
8.8
Élevée
CVE-2024-8496
Under specific circumstances, insecure permissions in Ivanti Workspace Control before version 10.18.40.0 allows a…
7.8
Élevée