6.8
Medium
CVE-2023-39338 Enables an authenticated user (enrolled device) to access a service protected by Sentry even if they are not…
Description
Enables an authenticated user (enrolled device) to access a service protected by Sentry even if they are not authorized according to the sentry policy to access that service. It does not enable the user to authenticate to or use the service, it just provides the tunnel access.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Sentry 9.0 | 9.0 → < 9.20 | 9.20 |
References
- forums.ivanti.com forums.ivanti.com
Timeline
- Published
- Last modified
Other CVEs of Sentry
The 6 CVEs of Sentry →
CVE-2026-83527
An Authentication Bypass vulnerability in Sentry before R10.8.2, R10.7.3 and R10.6.4 allows a remote unauthenticated…
8.1
High
CVE-2026-10523
An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and…
9.9
Critical
CVE-2026-10520
Ivanti Sentry OS Command Injection Vulnerability
10.0
Critical
CVE-2024-8540
Insecure permissions in Ivanti Sentry before versions 9.20.2 and 10.0.2 or 10.1.0 allow a local authenticated attacker…
8.8
High