CVE-2024-44107

Ivanti Workspace Control is affected by DLL hijacking in the management console, enabling local privilege escalation and arbitrary code execution. The CVE-2024-44107 issue impacts Workspace Control up to version 2025.2 (10.19.0.0); remediation is to upgrade to 2025.2 (10.19.0.0) or apply the vend...

CVE-2024-44106

Insufficient server-side controls in the management console of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to escalate their privileges...

CVE-2024-44106

Ivanti Workspace Control is affected by CVE-2024-44106 due to insufficient server-side controls in the management console, enabling a local authenticated attacker to escalate privileges. Public sources (Red Hat and PT Security) describe this as a privilege-escalation issue tied to the management ...

CVE-2024-44106

Insufficient server-side controls in the management console of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to escalate their privileges...

CVE-2024-44105

CVE-2024-44105 affects Ivanti Workspace Control: cleartext transmission of sensitive OS credentials in the management console. Affected: Workspace Control 2024.3 (10.18.x.x and below); vulnerability arises in the management console, enabling a local authenticated attacker to obtain OS credentials...

CVE-2024-44105

Cleartext transmission of sensitive information in the management console of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to obtain OS credentials...

CVE-2024-44105

Cleartext transmission of sensitive information in the management console of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to obtain OS credentials...

CVE-2024-44104

An incorrectly implemented authentication scheme that is subjected to a spoofing attack in the management console of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to escalate their privileges...

CVE-2024-44104

An incorrectly implemented authentication scheme that is subjected to a spoofing attack in the management console of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to escalate their privileges...

CVE-2024-44104

Vulnerability context (CVE-2024-44104): Ivanti Workspace Control’s management console before version 2025.2 (10.19.0.0) contains an incorrectly implemented authentication scheme that can be spoofed, allowing a locally authenticated attacker to escalate privileges. Impact: local privilege escalati...

CVE-2024-44103

DLL hijacking in the management console of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to escalate their privileges...

CVE-2024-44103

DLL hijacking in the management console of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to escalate their privileges...

CVE-2024-44103

Ivanti Workspace Control is affected by DLL hijacking in the management console prior to version 2025.2 (10.19.0.0). A locally authenticated attacker can escalate privileges due to an insecure DLL search path. Public sources corroborate that affected versions include 10.18.0.0 and earlier, with e...

CVE-2024-8012

Ivanti Workspace Control is affected by CVE-2024-8012, an authentication bypass in the message broker service that enables local privilege escalation for a locally authenticated attacker. Affected versions are Ivanti Workspace Control up to 2025.2 (10.19.0.0); remediation is to upgrade to 2025.2 ...

CVE-2024-8012

An authentication bypass weakness in the message broker service of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to escalate their privileges...

CVE-2024-8012

An authentication bypass weakness in the message broker service of Ivanti Workspace Control before version 2025.2 10.19.0.0 allows a local authenticated attacker to escalate their privileges...

CVE-2024-42423

Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin. A local unauthenticated user with low privileges may potentially exploit this vulnerability to bypass existing controls and perform unauthorized...

CVE-2024-42423

Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin. A local unauthenticated user with low privileges may potentially exploit this vulnerability to bypass existing controls and perform unauthorized...

CVE-2024-42423

The CVE-2024-42423 entry concerns Citrix Workspace App 23.9.0.24.4 on Dell ThinOS 2311 with an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin. A local, unauthenticated user with low privileges could bypass controls, potentially leading to information disclosure and ...

CVE-2024-42423

Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin. A local unauthenticated user with low privileges may potentially exploit this vulnerability to bypass existing controls and perform unauthorized...