Local Privilege Escalation Vulnerability in Ivanti Workspace Control
CVE-2024-8496

7.8HIGH

Key Information:

Vendor
Ivanti
Vendor
CVE Published:
11 December 2024

Summary

In Ivanti Workspace Control, versions prior to 10.18.40.0 exhibit a vulnerability where insecure permissions can be exploited under certain conditions. This flaw allows a local authenticated attacker to escalate their privileges, potentially enabling unauthorized actions within the system. This type of vulnerability underscores the importance of strict permission management and regular updates to security practices to mitigate risks associated with privilege escalation.

Affected Version(s)

Workspace Control 10.18.40.0

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.