CVE-2024-38259

Microsoft Management Console Remote Code Execution Vulnerability...

CVE-2024-38259 Microsoft Management Console Remote Code Execution Vulnerability

...

CVE-2024-38259 Microsoft Management Console Remote Code Execution Vulnerability

...

CVE-2024-38259

CVE-2024-38259 (Microsoft Management Console Remote Code Execution) is a MMC component vulnerability with CVSS v3.1 base score 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). It affects MMC and is described with potential to execute code remotely when exploited. The MMC entry is listed in Microsoft/VC...

Microsoft Management Console Remote Code Execution Vulnerability

...

Ivanti Workspace Control 代码问题漏洞

Ivanti Workspace Control is a suite of workspace control software from Ivanti USA. The software includes features such as user management, application management, and report management. A code issue vulnerability previously existed in Ivanti Workspace Control version 10.18.0.0, which stemmed from...

Ivanti Workspace Control 代码问题漏洞

Ivanti Workspace Control is a suite of workspace control software from Ivanti USA. The software includes features such as user management, application management, and report management. A code issue vulnerability previously existed in Ivanti Workspace Control version 10.18.0.0, which stemmed from...

Ivanti EPM 安全漏洞

Ivanti EPM is a one-stop-shop for managing user profiles and all client devices from Ivanti, USA. A security vulnerability exists in Ivanti EPM that stems from the inclusion of an SQL injection vulnerability in the management console. An unauthenticated, remote attacker could exploit the...

PT-2024-6587 · Ivanti · Ivanti Workspace Control

Name of the Vulnerable Software and Affected Versions: Ivanti Workspace Control versions 10.18.0.0 and below Description: The issue is related to an uncontrolled search path element in the Ivanti Workspace Control software, which can be exploited to allow an attacker to escalate their privileges...

CVE-2024-38259: Use After Free

Microsoft Management Console Remote Code Execution Vulnerability...

Ivanti Workspace Control 安全漏洞

Ivanti Workspace Control is a suite of workspace control software from Ivanti USA. The software includes features such as user management, application management and report management. A security vulnerability previously existed in Ivanti Workspace Control version 10.18.0.0, which stemmed from th...

Ivanti Workspace Control 安全漏洞

Ivanti Workspace Control is an American etc are products of the American Ivanti company.Ivanti Workspace Control is a suite of workspace control software.console etc are open source products.console is an application software.WebSockets ws etc are WebSockets are open source products. ws is a...

PT-2024-6662 · Ivanti · Ivanti Workspace Control

Name of the Vulnerable Software and Affected Versions: Ivanti Workspace Control versions 10.18.0.0 and below Description: The issue is related to the transmission of sensitive information in cleartext, allowing a local authenticated attacker to obtain operating system credentials. This can be...

Ivanti Workspace Control 安全漏洞

Ivanti Workspace Control is an American etc are products of the American Ivanti company.Ivanti Workspace Control is a suite of workspace control software.console etc are open source products.console is an application software.WebSockets ws etc are WebSockets are open source products. ws is a...

PT-2024-6252

Name of the Vulnerable Software and Affected Versions Microsoft Management Console affected versions not specified Description The issue is related to a remote code execution risk, where exploitation may allow a remote attacker to execute arbitrary code. This is associated with a use-after-free...

CVE-2024-44106: Client-Side Enforcement of Server-Side Security

Insufficient server-side controls in the management console of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to escalate their privileges...

CVE-2024-44103: Untrusted Search Path

DLL hijacking in the management console of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to escalate their privileges...

PT-2024-6588 · Ivanti · Ivanti Epm

Name of the Vulnerable Software and Affected Versions: Ivanti EPM versions before 2022 SU6 Ivanti EPM versions before the 2024 September update Description: The issue is related to SQL injection in the management console of Ivanti EPM, allowing a remote unauthenticated attacker to achieve remote...

CVE-2024-44107: Uncontrolled Search Path Element

DLL hijacking in the management console of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to escalate their privileges and achieve arbitrary code execution...

PT-2024-6586 · Ivanti · Ivanti Workspace Control

Name of the Vulnerable Software and Affected Versions: Ivanti Workspace Control versions 10.18.0.0 and below Description: The issue is related to insufficient server-side controls in the management console of Ivanti Workspace Control, which can be exploited by a local authenticated attacker to...