ZDI-CAN-23860: ZDI-24-1222: Ivanti Workspace Control RES Exposed Dangerous Method Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Ivanti Workspace Control. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-8012.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-23860?
The ZDI-CAN-23860 vulnerability has been assigned a high severity level due to its potential for local privilege escalation.
How do I fix ZDI-CAN-23860?
To fix ZDI-CAN-23860, install the latest security updates provided by Ivanti for Workspace Control.
Who is affected by ZDI-CAN-23860?
ZDI-CAN-23860 affects installations of Ivanti Workspace Control where attackers can run low-privileged code.
What type of attacks can ZDI-CAN-23860 facilitate?
ZDI-CAN-23860 can facilitate local privilege escalation attacks by allowing unauthorized users to gain higher access levels.
What do I need to exploit ZDI-CAN-23860?
To exploit ZDI-CAN-23860, an attacker must first have the ability to execute low-privileged code on the target system.