CVE-2024-44104: High severity ivanti workspace control vulnerability
An incorrectly implemented authentication scheme that is subjected to a spoofing attack in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to escalate their privileges.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-44104?
CVE-2024-44104 is classified as a critical vulnerability due to its potential for privilege escalation by an authenticated local attacker.
How do I fix CVE-2024-44104?
To mitigate CVE-2024-44104, upgrade to Ivanti Workspace Control version 10.18.100.0 or later, which addresses the authentication flaw.
Which versions of Ivanti Workspace Control are affected by CVE-2024-44104?
CVE-2024-44104 affects Ivanti Workspace Control versions 10.18.0.0 and below.
Who can exploit CVE-2024-44104?
CVE-2024-44104 can be exploited by local authenticated attackers, allowing them to escalate their privileges.
What is the nature of the vulnerability described in CVE-2024-44104?
CVE-2024-44104 is caused by an incorrectly implemented authentication scheme in the management console.