CVE-2023-38035
Ivanti Sentry Authentication Bypass Vulnerability
CVSS
—
Sin CVSS
EPSS
100.0%
p100
KEV
SÍ
22 ago 2023
Exploit Today
80
0-100
Publicado: — · Última mod.: —
Producto
Ivanti / Sentry
Vulnerabilidad
Ivanti Sentry Authentication Bypass Vulnerability
Añadido a KEV
22 ago 2023
Remediar antes de
12 sept 2023
Uso conocido en ransomware
Sí
Descripción resumida
Ivanti Sentry, formerly known as MobileIron Sentry, contains an authentication bypass vulnerability that may allow an attacker to bypass authentication controls on the administrative interface due to an insufficiently restrictive Apache HTTPD configuration.
Acción requerida
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notas
https://forums.ivanti.com/s/article/CVE-2023-38035-API-Authentication-Bypass-on-Sentry-Administrator-Interface?language=en_US ; https://nvd.nist.gov/vuln/detail/CVE-2023-38035