Local Authenticated Attacker Can Access OS Credentials via Cleartext Transmission in Ivanti Workspace Control

CVE-2024-44105

What is CVE-2024-44105?

The vulnerability in Ivanti Workspace Control allows local authenticated attackers to exploit the management console, resulting in the cleartext transmission of sensitive information. Versions 10.18.0.0 and earlier are particularly susceptible, as they enable unauthorized access to operating system credentials. This flaw poses significant risks as it can be exploited by individuals with local access to the system, emphasizing the necessity of securing management interfaces and employing encryption for sensitive data transmissions.

References