Ivanti fixed a new critical Sentry API authentication bypass flaw

Ivanti warned customers of a new critical Sentry API authentication bypass vulnerability tracked as CVE-2023-38035. The software company Ivanti released urgent security patches to address a critical-severity vulnerability, tracked as CVE-2023-38035 (CVSS score 9.8), in the Ivanti Sentry (formerly MobileIron Sentry) product. The vulnerability could be exploited to access sensitive API data and configurations, run […]

The post Ivanti fixed a new critical Sentry API authentication bypass flaw appeared first on Security Affairs.

access address api api authentication authentication authentication bypass authentication bypass flaw breaking news bypass bypass vulnerability critical customers cve cvss exploited flaw hacking information security news it information security ivanti mobileiron patches pierluigi paganini product score security sentry severity software urgent vulnerability