Vulnerabilities > CVE-2024-44106 - Unspecified vulnerability in Ivanti Workspace Control

CVSS 7.8 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

ivanti

NVD

Published: 2024-09-10

Updated: 2024-09-18

Summary

Insufficient server-side controls in the management console of Ivanti Workspace Control version 10.18.0.0 and below allows a local authenticated attacker to escalate their privileges.

Vulnerable Configurations

Part	Description	Count
Application	Ivanti Ivanti Workspace Control 10.1.0.0 Ivanti Workspace Control 10.2.0.0 Ivanti Workspace Control 10.2.0.1 Ivanti Workspace Control 10.2.500.1 Ivanti Workspace Control 10.2.600.1 Ivanti Workspace Control 10.2.700.1 Ivanti Workspace Control 10.2.800.0 Ivanti Workspace Control 10.2.900.1 Ivanti Workspace Control 10.2.950.0 Ivanti Workspace Control 10.3.0.0 Ivanti Workspace Control 10.3.10.0 Ivanti Workspace Control 10.3.20.0 Ivanti Workspace Control 10.3.30.0 Ivanti Workspace Control 10.3.40.0 Ivanti Workspace Control 10.3.50.0 Ivanti Workspace Control 10.3.90.0 Ivanti Workspace Control 10.3.110.0 Ivanti Workspace Control 10.3.180.0 Ivanti Workspace Control 10.4.30.0 Ivanti Workspace Control 10.4.40.0 Ivanti Workspace Control 10.4.50.0 Ivanti Workspace Control 10.6.30.0 Ivanti Workspace Control 10.7.30.0	23

References

https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Workspace-Control-IWC