Local Authenticated Attacker Can Escalate Privileges via Server-Side Controls in Ivanti Workspace Control

CVE-2024-44106

What is CVE-2024-44106?

The Ivanti Workspace Control management console has a vulnerability due to insufficient server-side controls. This flaw enables a local authenticated attacker to escalate their privileges, potentially allowing them to perform unauthorized actions within the system. This issue impacts versions 10.18.0.0 and earlier, making it crucial for users to apply the latest security updates and patches to mitigate the risks associated with this vulnerability. For more information, refer to the security advisory provided by Ivanti.

References