VulnerabilitycriticalExploited in the wild

Ivanti fixed a new critical Sentry API authentication bypass flaw

Security Affairsby @securityaffairsAug 22, 2023 · 06:59 UTC (Aug 22, 2023)1 min read4 · 1 read

Read at securityaffairs.com

Analyze CVE-2023-38035 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-38035 CVE-2023-35078 CVE-2023-35081

Tags: cve-2023-38035 cve-2023-35078 cve-2023-35081 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-35078	Authentication Bypass in Ivanti Endpoint Manager Mobile (EPMM) Exposes PII	9.8	100%	KEVRansomwarePoC	Jul 25, 2023 KEV Jul 25, 2023
CVE-2023-35081	Authenticated Path Traversal in Ivanti Endpoint Manager Mobile (EPMM)	7.2	64%	KEV	Aug 3, 2023 KEV Jul 31, 2023
CVE-2023-38035	Authentication Bypass in Ivanti Sentry (MobileIron Sentry) Admin Interface	9.8	100%	KEVRansomwarePoC	Aug 21, 2023 KEV Aug 22, 2023

From the original article

1 min read at securityaffairs.com

Ivanti warned customers of a new critical Sentry API authentication bypass vulnerability tracked as CVE-2023-38035 . The software company Ivanti released urgent security patches to address a critical-severity vulnerability, tracked as CVE-2023-38035 (CVSS score 9. 8), in the Ivanti Sentry (formerly MobileIron Sentry) product.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.