Local Privilege Escalation Vulnerability in Ivanti Workspace Control

CVE-2024-8496

What is CVE-2024-8496?

In Ivanti Workspace Control, versions prior to 10.18.40.0 exhibit a vulnerability where insecure permissions can be exploited under certain conditions. This flaw allows a local authenticated attacker to escalate their privileges, potentially enabling unauthorized actions within the system. This type of vulnerability underscores the importance of strict permission management and regular updates to security practices to mitigate risks associated with privilege escalation.

References