High · 7.8 CVE-2024-8012 EUVD-2024-48884GHSA-mqp5-vpv8-vhqm

An authentication bypass weakness in the message broker service of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a loca…

Published Sep 10, 2024 · Updated Jun 12, 2025 · Assigned by ivanti

Vendor: ivanti Product: Workspace Control Category: Network devices

Description

An authentication bypass weakness in the message broker service of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to escalate their privileges.

Affected products

Vendor	Product	Affected	Fixed
Ivanti	Workspace Control	—	10.19.0.0

References

https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Workspace-Control-IWC