Skip to content
NewA calmer, faster ZeroHour
Vulnerabilitycritical

Ivanti Releases Urgent Fix for Critical Sentry RCE Vulnerability

The Hacker Newsby @TheHackersNews ()2 min read2 · 1 read
Read at thehackernews.com
Analyze CVE-2023-41724 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2023-41724CVE-2023-46808CVE-2023-47479
Tags
cve-2023-41724cve-2023-46808cve-2023-47479vulnerability

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2023-41724
A command injection vulnerability in Ivanti Sentry prior to 9.19.0 allows unauthenticated threat actor to execute arbitrary commands on the underlying…
8.813%
CVE-2023-46808
An file upload vulnerability in Ivanti ITSM before 2023.4, allows an authenticated remote user to perform file writes to the server
9.92%

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Mar 21, 2024 Vulnerability / Web Security Ivanti has disclosed details of a critical remote code execution flaw impacting Standalone Sentry, urging customers to apply the fixes immediately to stay protected against potential cyber threats. Tracked as CVE-2023-41724 , the vulnerability carries a CVSS score of 9. 6.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.