Workspace Control vulnerabilities
8 known vulnerabilities in Workspace Control from Ivanti. 8 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.3 High severity
Workspace Control: Use of Hard-coded Cryptographic Key
A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt the stored environment password.
- 7.8 High severity
Workspace Control: Incorrect Default Permissions
Under specific circumstances, insecure permissions in Ivanti Workspace Control before version 10.18.40.0 allows a local authenticated attacker to achieve local privilege escalation.
- 7.8 High severity
Workspace Control: Missing Authentication for Critical Functionality
An authentication bypass weakness in the message broker service of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to escalate their privileges.
- 7.8 High severity
Workspace Control: Uncontrolled Search Path Element
DLL hijacking in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to escalate their privileges and achieve arbitrary code execution.
- 7.8 High severity
Workspace Control: Client-Side Enforcement of Server-Side Security
Insufficient server-side controls in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to escalate their privileges.
- 7.8 High severity
Workspace Control: Cleartext Transmission of Sensitive Information
Cleartext transmission of sensitive information in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to obtain OS credentials.
- 7.8 High severity
Workspace Control: Authentication Bypass by Spoofing
An incorrectly implemented authentication scheme that is subjected to a spoofing attack in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to escalate their privileges.
- 7.8 High severity
Workspace Control: Untrusted Search Path
DLL hijacking in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to escalate their privileges.