How severe is CVE-2024-44104?

CVE-2024-44104 has a CVSS v3 score of 8.8 (HIGH).

CVE-2024-44104

Name: workspace_control
Author: ivanti

8.8HIGH

An incorrectly implemented authentication scheme that is subjected to a spoofing attack in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenti

Published: 9/10/2024Updated: 6/12/2025

Description

An incorrectly implemented authentication scheme that is subjected to a spoofing attack in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to escalate their privileges.

AI AnalysisPowered by AI

Affected Products

ivantiworkspace_control

References

https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Workspace-Control-IWC
Vendor Advisory