Local Authenticated Attacker Can Escalate Privileges via Server-Side Controls in Ivanti Workspace Control
CVE-2024-44106

7.8HIGH

Key Information:

Vendor
Ivanti
Status
Workspace Control
Vendor
CVE Published:
10 September 2024

Summary

The Ivanti Workspace Control management console has a vulnerability due to insufficient server-side controls. This flaw enables a local authenticated attacker to escalate their privileges, potentially allowing them to perform unauthorized actions within the system. This issue impacts versions 10.18.0.0 and earlier, making it crucial for users to apply the latest security updates and patches to mitigate the risks associated with this vulnerability. For more information, refer to the security advisory provided by Ivanti.

Affected Version(s)

Workspace Control 10.18.50.0

References

https://forums.ivanti.com/s/article/Security-Advisory-Iva...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.