PT-2024-6663 · Ivanti · Ivanti Workspace Control

Published 2024-04-25 · Updated 2024-09-18 · CVE-2024-8012

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Ivanti Workspace Control versions 10.18.0.0 and below

Description: The issue is related to an authentication bypass weakness in the message broker service, allowing a local authenticated attacker to escalate their privileges. This is due to the use of dangerous methods or functions in the service. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

Recommendations: For Ivanti Workspace Control versions 10.18.0.0 and below, update to a version above 10.18.0.0 to resolve the issue. At the moment, there is no information about additional mitigation measures.

Fix

Missing Authentication

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-306

CWE-288

Related Identifiers

BDU:2024-07865

CVE-2024-8012

ZDI-24-1222

Affected Products

Ivanti Workspace Control

References · 10

• https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Workspace-Control-IWC · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-24-1222 · Security Note
• https://bdu.fstec.ru/vul/2024-07865 · Security Note
• https://osv.dev/vulnerability/CVE-2024-8012 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-8012 · Security Note
• https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Workspace-Control-IWC?language=en_US · Note
• https://t.me/cvenotify/95130 · Telegram Post
• https://t.me/cvedetector/5308 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2024091135 · Note
• https://twitter.com/CVEnew/status/1833608021622329526 · Twitter Post