module
Ivanti Sentry MICSLogService Auth Bypass resulting in RCE (CVE-2023-38035)
| Disclosed |
|---|
| Aug 21, 2023 |
Disclosed
Aug 21, 2023
Description
This module exploits an authentication bypass in Ivanti Sentry which exposes API functionality which
allows for code execution in the context of the root user.
allows for code execution in the context of the root user.
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.