Firetruck

CVE-2023-38035

KEV · Ransomware
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

Ivanti Sentry, formerly known as MobileIron Sentry, contains an authentication bypass vulnerability that may allow an attacker to bypass authentication controls on the administrative interface due to an insufficiently restrictive Apache HTTPD configuration.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
mobileiron_sentryivanti / mobileiron_sentry>= 0, <= 9.18.0affected
MobileIron SentryIvanti / MobileIron Sentry>= 9.18.0 and below, < 9.18.0 and belowaffected