VULNERABILITY INTELLIGENCE

CVE-2025-5353

CVSS score8.8 HIGH
EPSS probability0.38%
CISA KEVNot currently listed
Published2025-06-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Description

A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt stored SQL credentials.

Weakness classification

  • CWE-321: Use of Hard-coded Cryptographic Key

Primary references