9.6
Critique
CVE-2023-41724 A command injection vulnerability in Ivanti Sentry prior to 9.19.0 allows unauthenticated threat actor to execute…
Description
A command injection vulnerability in Ivanti Sentry prior to 9.19.0 allows unauthenticated threat actor to execute arbitrary commands on the underlying operating system of the appliance within the same physical or logical network.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Sentry | 9.19.0 | Pas de correctif indiqué |
Références
- forums.ivanti.com forums.ivanti.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Sentry
Les 6 CVE de Sentry →
CVE-2026-83527
An Authentication Bypass vulnerability in Sentry before R10.8.2, R10.7.3 and R10.6.4 allows a remote unauthenticated…
8.1
Élevée
CVE-2026-10523
An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and…
9.9
Critique
CVE-2026-10520
Ivanti Sentry OS Command Injection Vulnerability
10.0
Critique
CVE-2023-39338
Enables an authenticated user (enrolled device) to access a service protected by Sentry even if they are not…
6.8
Moyenne