High · 7.3 CVE-2025-22463 EUVD-2025-17688GHSA-c9fr-q3m5-j6mm

A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt the stored environme…

Published Jun 10, 2025 · Updated Feb 26, 2026 · Assigned by ivanti

Vendor: ivanti Product: Workspace Control Category: Network devices

Description

A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt the stored environment password.

Affected products

Vendor	Product	Affected	Fixed
Ivanti	Workspace Control	—	10.19.10.0

Advisories 1

NCSC-2025-0193 Kwetsbaarheden verholpen in Ivanti Workspace Control NCSC-NL (Netherlands) · Jun 12, 2025

References

https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Workspace-Control-CVE-2025-5353-CVE-CVE-2025-22463-CVE-2025-22455

CNA	v3.1	7.3
EUVD	v3.1	7.3