CVE-2024-44106

Ivanti / Workspace Control PUBLISHED

Description (CNA)

Insufficient server-side controls in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to escalate their privileges.

Affected (CNA)

Vendor / product	Versions
Ivanti / Workspace Control	unaffected 10.19.0.0

CWE

CWE-602

References

https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Workspace-Control-IWC

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.