high8.8
CVE-2025-22455
A hardcoded key in Ivanti Workspace Control before version 10.19.0.0 allows a local authenticated attacker to decrypt stored SQL credentials.
Impact
A hardcoded key in Ivanti Workspace Control before version 10.19.0.0 allows a local authenticated attacker to decrypt stored SQL credentials.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ivanti | Workspace Control | before 10.19.10.0 |