Aug. 24, 2023, 11:52 a.m. | James Horseman

Security Boulevard securityboulevard.com

Introduction Ivanti has recently published an advisory for CVE-2023-38035. The vulnerability has been added to CISA KEV and is described as an authentication bypass in the Ivanti Sentry administrator interface. This new vulnerability comes on the heels of an in-the-wild-exploited vulnerability in Ivanti EPMM (CVE-2023-35078). In this post we will take a deep dive into […]


The post Ivanti Sentry Authentication Bypass CVE-2023-38035 Deep Dive appeared first on Horizon3.ai.


The post Ivanti Sentry Authentication Bypass CVE-2023-38035 Deep Dive appeared …

advisory authentication authentication bypass blog bypass cisa cisa kev cve cve-2023-35078 cve-2023-38035 deep dive dive epmm exploited interface introduction ivanti ivanti epmm kev red team sentry social engineering vulnerability

Sr. Staff Security Engineer

@ Databricks | San Francisco, California

Security Engineer

@ Nomi Health | Austin, Texas

Senior Principal Consultant, Security Architecture

@ 6point6 | Manchester, United Kingdom

Cyber Policy Advisor

@ IntelliBridge | McLean, VA, McLean, VA, US

TW Full Stack Software Engineer (Access Control & Intrusion Systems)

@ Bosch Group | Taipei, Taiwan

Cyber Software Engineer

@ Peraton | Annapolis Junction, MD, United States