202 matches found
CVE-2024-44104: Authentication Bypass by Spoofing
An incorrectly implemented authentication scheme that is subjected to a spoofing attack in the management console of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to escalate their privileges...
Ivanti Workspace Control 代码问题漏洞
Ivanti Workspace Control is a suite of workspace control software from Ivanti USA. The software includes features such as user management, application management, and report management. A code issue vulnerability previously existed in Ivanti Workspace Control version 10.18.0.0, which stemmed from...
PT-2024-6660 · Ivanti · Ivanti Workspace Control
Name of the Vulnerable Software and Affected Versions: Ivanti Workspace Control versions 10.18.0.0 and below Description: The issue is related to an incorrectly implemented authentication scheme in the management console of Ivanti Workspace Control, which is vulnerable to a spoofing attack. This...
Ivanti Workspace Control 安全漏洞
Ivanti Workspace Control is a suite of workspace control software from Ivanti USA. The software includes features such as user management, application management and report management. A security vulnerability previously existed in Ivanti Workspace Control version 10.18.0.0, which stemmed from th...
PT-2024-6586 · Ivanti · Ivanti Workspace Control
Name of the Vulnerable Software and Affected Versions: Ivanti Workspace Control versions 10.18.0.0 and below Description: The issue is related to insufficient server-side controls in the management console of Ivanti Workspace Control, which can be exploited by a local authenticated attacker to...
CVE-2024-8012: Authentication Bypass Using an Alternate Path or Channel
An authentication bypass weakness in the message broker service of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to escalate their privileges...
CVE-2024-44105: Cleartext Transmission of Sensitive Information
Cleartext transmission of sensitive information in the management console of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to obtain OS credentials...
CVE-2024-44103: Untrusted Search Path
DLL hijacking in the management console of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to escalate their privileges...
PT-2024-6663 · Ivanti · Ivanti Workspace Control
Name of the Vulnerable Software and Affected Versions: Ivanti Workspace Control versions 10.18.0.0 and below Description: The issue is related to an authentication bypass weakness in the message broker service, allowing a local authenticated attacker to escalate their privileges. This is due to t...
CVE-2022-21823
A insecure storage of sensitive information vulnerability exists in Ivanti Workspace Control 2021.2 10.7.30.0 that could allow an attacker with locally authenticated low privileges to obtain key information due to an unspecified attack vector...
CVE-2022-21823
A insecure storage of sensitive information vulnerability exists in Ivanti Workspace Control 2021.2 10.7.30.0 that could allow an attacker with locally authenticated low privileges to obtain key information due to an unspecified attack vector...
CVE-2022-21823
A insecure storage of sensitive information vulnerability exists in Ivanti Workspace Control 2021.2 10.7.30.0 that could allow an attacker with locally authenticated low privileges to obtain key information due to an unspecified attack vector...
Information disclosure
A insecure storage of sensitive information vulnerability exists in Ivanti Workspace Control 2021.2 10.7.30.0 that could allow an attacker with locally authenticated low privileges to obtain key information due to an unspecified attack vector...
Ivanti Workspace Control 安全漏洞
Ivanti Workspace Control RES One Workspace is a set of workspace control software from Ivanti, USA. The software includes features such as user management, application management and report management. A security vulnerability exists in versions prior to Ivanti Workspace Control 2021.2 10.7.30.0,...
CVE-2022-21823
CVE-2022-21823 concerns an insecure storage of sensitive information in Ivanti Workspace Control prior to 2021.2 (10.7.30.0). The issue could allow a locally authenticated low-privilege attacker to obtain key information via an unspecified attack vector. The connected documents confirm the produc...
CVE-2022-21823
A insecure storage of sensitive information vulnerability exists in Ivanti Workspace Control 2021.2 10.7.30.0 that could allow an attacker with locally authenticated low privileges to obtain key information due to an unspecified attack vector...
CVE-2022-21823: Insecure Storage of Sensitive Information
A insecure storage of sensitive information vulnerability exists in Ivanti Workspace Control 2021.2 10.7.30.0 that could allow an attacker with locally authenticated low privileges to obtain key information due to an unspecified attack vector...
CVE-2019-19138
Ivanti Workspace Control before 10.4.50.0 allows attackers to degrade integrity...