CVE-2024-8496: High severity ivanti workspace control vulnerability
Published Dec 11, 2024
·Updated
Under specific circumstances, insecure permissions in Ivanti Workspace Control before version 10.18.40.0 allows a local authenticated attacker to achieve local privilege escalation.
Affected Software
1 affected component
Ivanti Workspace Control>=10.18.30.0<10.18.40.0
Event History
Dec 11, 2024
CVE Published
via MITRE·04:43 PM
Data Sourced
via MITRE·04:43 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-8496?
CVE-2024-8496 is classified as a local privilege escalation vulnerability.
2
How do I fix CVE-2024-8496?
To mitigate CVE-2024-8496, update Ivanti Workspace Control to version 10.18.40.0 or later.
3
Who is affected by CVE-2024-8496?
CVE-2024-8496 affects all versions of Ivanti Workspace Control before 10.18.40.0.
4
What can an attacker do with CVE-2024-8496?
An authenticated local attacker can exploit CVE-2024-8496 to escalate privileges on the affected system.
5
When was CVE-2024-8496 reported?
CVE-2024-8496 was reported in December 2024.