ZDI-24-1222: Ivanti Workspace Control RES Exposed Dangerous Method Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Ivanti Workspace Control. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-8012.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-24-1222?
The severity of ZDI-24-1222 is assessed based on its potential for local privilege escalation, which can significantly impact system security.
How do I fix ZDI-24-1222?
To mitigate ZDI-24-1222, ensure that you apply the latest security patches provided by Ivanti for Workspace Control.
Who is affected by ZDI-24-1222?
ZDI-24-1222 affects local installations of Ivanti Workspace Control where low-privileged code execution can lead to privilege escalation.
What type of attack does ZDI-24-1222 involve?
ZDI-24-1222 involves local privilege escalation attacks that require an attacker to first execute low-privileged code.
What should organizations do after identifying ZDI-24-1222?
Organizations should immediately assess their installations of Ivanti Workspace Control and implement the recommended patches or mitigations.