CVE-2023-38035

2023-08-2116:51:20

hackerone

www.cve.org

vulnerability

mics admin portal

ivanti mobileiron sentry

authentication bypass

apache httpd

9.8 High

AI Score

Confidence

High

0.975 High

EPSS

Percentile

100.0%

JSON

A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an attacker to bypass authentication controls on the administrative interface due to an insufficiently restrictive Apache HTTPD configuration.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "vendor": "Ivanti",
    "product": "MobileIron Sentry",
    "versions": [
      {
        "version": "9.18.0 and below",
        "status": "affected",
        "lessThan": "9.18.0 and below",
        "versionType": "custom"
      }
    ]
  }
]