CVE-2024-8012

EUVD-2024-48884 · Published Sep 10, 2024

An authentication bypass weakness in the message broker service of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to escalate their privileges.

Technologies

Ivanti Workspace Control

Weaknesses

CWE-288CWE-306

CVSS scores

v3.17.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Persistence Privilege Escalation Stealth Defense Impairment Credential Access Discovery

T1068Exploitation for Privilege Escalation T1083File and Directory Discovery T1211Exploitation for Stealth T1542.002Component Firmware T1556Modify Authentication Process

References

https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Workspace-Control-IWC

Potentially impacted assets

See if this affects your attack surface