← All advisories

High severity8.8NVD Advisory· Published Jun 10, 2025· Updated Jun 17, 2026

CVE-2025-22455

CVE-2025-22455

Description

A hardcoded key in Ivanti Workspace Control before version 10.19.0.0 allows a local authenticated attacker to decrypt stored SQL credentials.

Affected products

3

Ivanti/Workspace Control3 versions
cpe:2.3:a:ivanti:workspace_control:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:ivanti:workspace_control:*:*:*:*:*:*:*:*range: <10.19.10.0
- (no CPE)range: <10.19.0.0
- (no CPE)range: 10.19.0.0

Patches

Vulnerability mechanics

References

1

forums.ivanti.com/s/article/Security-Advisory-Ivanti-Workspace-Control-CVE-2025-5353-CVE-CVE-2025-22463-CVE-2025-22455nvdVendor Advisory

News mentions

0

No linked articles in our index yet.