Local Auth Bypass Could Lead to Privilege Escalation

CVE-2024-8012

Summary

An authentication bypass vulnerability exists in the message broker service of Ivanti Workspace Control, affecting version 10.18.0.0 and earlier. This vulnerability allows a local authenticated attacker to escalate their privileges, potentially granting access to sensitive functionalities and data within the system. Proper patching and mitigation strategies are essential to safeguard against this type of attack, as it may lead to unauthorized actions and increased security risks.

References