Ivanti Workspace Control up to 10.18.50.0 Management Console cleartext transmission

Summaryinfo

A vulnerability described as problematic has been identified in Ivanti Workspace Control up to 10.18.50.0. Affected is an unknown function of the component Management Console. Such manipulation leads to cleartext transmission. This vulnerability is referenced as CVE-2024-44105. The attack can only be performed from a local environment. No exploit is available. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability was found in Ivanti Workspace Control up to 10.18.50.0. It has been rated as problematic. Affected by this issue is an unknown code block of the component Management Console. The manipulation with an unknown input leads to a cleartext transmission vulnerability. Using CWE to declare the problem leads to CWE-319. The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors. Impacted is confidentiality. CVE summarizes:

Cleartext transmission of sensitive information in the management console of Ivanti Workspace Control version 10.18.0.0 and below allows a local authenticated attacker to obtain OS credentials.

The advisory is shared for download at forums.ivanti.com. This vulnerability is handled as CVE-2024-44105 since 08/20/2024. The exploitation is known to be easy. The attack needs to be approached locally. There are neither technical details nor an exploit publicly available. The MITRE ATT&CK project declares the attack technique as T1040.

Upgrading to version 10.18.50.0 eliminates this vulnerability.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Vendor

• Ivanti

Name

• Workspace Control

Version

• 10.18.0
• 10.18.1
• 10.18.2
• 10.18.3
• 10.18.4
• 10.18.5
• 10.18.6
• 10.18.7
• 10.18.8
• 10.18.9
• 10.18.10
• 10.18.11
• 10.18.12
• 10.18.13
• 10.18.14
• 10.18.15
• 10.18.16
• 10.18.17
• 10.18.18
• 10.18.19
• 10.18.20
• 10.18.21
• 10.18.22
• 10.18.23
• 10.18.24
• 10.18.25
• 10.18.26
• 10.18.27
• 10.18.28
• 10.18.29
• 10.18.30
• 10.18.31
• 10.18.32
• 10.18.33
• 10.18.34
• 10.18.35
• 10.18.36
• 10.18.37
• 10.18.38
• 10.18.39
• 10.18.40
• 10.18.41
• 10.18.42
• 10.18.43
• 10.18.44
• 10.18.45
• 10.18.46
• 10.18.47
• 10.18.48
• 10.18.49
• 10.18.50.0

License

• commercial

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion