6.8
Moyenne
CVE-2023-39338 Enables an authenticated user (enrolled device) to access a service protected by Sentry even if they are not…
Description
Enables an authenticated user (enrolled device) to access a service protected by Sentry even if they are not authorized according to the sentry policy to access that service. It does not enable the user to authenticate to or use the service, it just provides the tunnel access.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Sentry 9.0 | 9.0 → < 9.20 | 9.20 |
Autres CVE de Sentry
Les 6 CVE de Sentry →
CVE-2026-83527
An Authentication Bypass vulnerability in Sentry before R10.8.2, R10.7.3 and R10.6.4 allows a remote unauthenticated…
8.1
Élevée
CVE-2026-10523
An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and…
9.9
Critique
CVE-2026-10520
Ivanti Sentry OS Command Injection Vulnerability
10.0
Critique
CVE-2024-8540
Insecure permissions in Ivanti Sentry before versions 9.20.2 and 10.0.2 or 10.1.0 allow a local authenticated attacker…
8.8
Élevée