Ivanti Workspace Control (IWC) is Ivanti's workspace management solution, acting as an intermediary between the operating system and users to simplify desktop deployment and protect user settings and records. Recently, Ivanti issued a security advisory, pointing out that the system has two critical security vulnerabilities (CVE-2025-5353, CVSS: 8.8 and CVE-2025-22455, CVSS: 8.8), and has released patched versions. Both vulnerabilities allow locally authenticated attackers to decrypt stored SQL credentials using a hardcoded key.