CVE-2023-38035

Summary

CVE-2023-38035 is a newly disclosed vulnerability affecting Ivanti MobileIron Sentry versions 9.18.0 and below. The issue lies in the MICS Admin Portal's Apache HTTPD configuration, which is deemed insufficiently restrictive. An attacker can exploit this weakness to bypass authentication controls on the administrative interface, putting sensitive data at risk. This vulnerability poses a significant threat to organizations using outdated Ivanti MobileIron Sentry versions and emphasizes the importance of timely software updates and secure configurations.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.