High · 8.8 CVE-2024-44106 EUVD-2024-40870GHSA-358h-hvvf-x4v2

Insufficient server-side controls in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local au…

Published Sep 10, 2024 · Updated Jun 12, 2025 · Assigned by ivanti

Vendor: ivanti Product: Workspace Control Category: Network devices

Description

Insufficient server-side controls in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to escalate their privileges.

Affected products

Vendor	Product	Affected	Fixed
Ivanti	Workspace Control	—	10.19.0.0

References

https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Workspace-Control-IWC