RaqibCTI
CVE

CVE-2023-38035

P1⬤ KNOWN RANSOMWARE USE
Ivanti Sentry Authentication Bypass Vulnerability
Ivanti · Sentry
Date added (CISA)
2023-08-22
Remediation due
2023-09-12
Known ransomware use
Yes
Remediation priority
P1known ransomware use · past CISA due date

Description

Ivanti Sentry, formerly known as MobileIron Sentry, contains an authentication bypass vulnerability that may allow an attacker to bypass authentication controls on the administrative interface due to an insufficiently restrictive Apache HTTPD configuration.

Source: NVD ↗ · CISA KEV Catalog ↗