Lucene search

K
hiveproHive ProHIVEPRO:84FCBA8421632F1B67E8B3D42A656537
HistoryAug 23, 2023 - 5:54 a.m.

Ivanti Addressed A New Zero-Day Flaw in Ivanti Sentry

2023-08-2305:54:42
Hive Pro
www.hivepro.com
40
ivanti
zero-day flaw
cve-2023-38035
sentry
unauthenticated access
api
system compromise
rpm scripts
port 8443
external access
hiveforce labs
threat advisories

0.975 High

EPSS

Percentile

100.0%

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary The zero-day vulnerability (CVE-2023-38035) in Ivanti Sentry (versions 9.18 and earlier) allows unauthenticated access to sensitive APIs via port 8443, posing a risk of configuration manipulation and system compromise. Apply specific RPM scripts and restrict external access for mitigation To receive real-time threat advisories, please follow HiveForce Labs on LinkedIn.