Skip to content
fr Sign in
8.8 High

CVE-2024-8540 Insecure permissions in Ivanti Sentry before versions 9.20.2 and 10.0.2 or 10.1.0 allow a local authenticated attacker…

Description

Insecure permissions in Ivanti Sentry before versions 9.20.2 and 10.0.2 or 10.1.0 allow a local authenticated attacker to modify sensitive application components.

Affected products and versions

Product Affected versions Fixed in
Sentry 10.1 earliest → < 10.1.0 10.1.0
Sentry 10.0 earliest → < 10.0.2 10.0.2
Sentry 9.20 earliest → < 9.20.2 9.20.2

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Sentry

The 6 CVEs of Sentry →
CVE-2026-83527 An Authentication Bypass vulnerability in Sentry before R10.8.2, R10.7.3 and R10.6.4 allows a remote unauthenticated… 8.1 High CVE-2026-10523 An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and… 9.9 Critical CVE-2026-10520 Ivanti Sentry OS Command Injection Vulnerability 10.0 Critical CVE-2023-39338 Enables an authenticated user (enrolled device) to access a service protected by Sentry even if they are not… 6.8 Medium
Track this CVE