CVE-2023-38035: Ivanti Sentry Authentication Bypass Vulnerability
Vulnerability summary
CVE-2023-38035 is a critical (CVSS 9.8) Incorrect Authorization vulnerability in Ivanti Sentry. It is known to be exploited: CISA lists it, first on 22-08-2023. It has been used in ransomware campaigns. EPSS estimates a 99.95% chance of exploitation in the next 30 days, higher than 99.9% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 21-08-2023PublishedVulnerability first disclosed.
- 22-08-2023Added to CISA KEVIvanti Sentry Authentication Bypass Vulnerability
- 12-09-2023CISA remediation dueApply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- 21-10-2025Last modifiedVulnerability information updated.
Description
A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an attacker to bypass authentication controls on the administrative interface due to an insufficiently restrictive Apache HTTPD configuration.
CVSS metrics
2 scores · 2 sources · 1 version- NVDNIST9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
99.95%
Chance of exploitation in the next 30 days
Percentile
100%
Versus all other CVEs
30-day change
0.00 pp
From 99.95% on 20-09-2026
Known exploited
Compare KEV catalogs
CISA KEVListed- Added
- 22-08-2023
- Federal due date
- 12-09-2023
CISA required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. forums.ivanti.com/s/… nvd.nist.gov/vuln/detail/CVE-2023-38035
Public exploits
2 foundExploit Reference (packetstormsecurity.com)
Maturity: unknown
Ivanti Sentry MICSLogService Auth Bypass resulting in RCE (CVE-2023-38035)
exploit/linux/http/ivanti_sentry_misc_log_service
Maturity: weaponized
Weaknesses
CWE · root causeAffected systems
Ivanti1 product
- mobileiron_sentry≥ 9.18.0 and below, < 9.18.0 and below | ≤ 9.18.0
1 vendor · 1 product
References
3 links- forums.ivanti.com/s/…Vendor Advisory
- packetstormsecurity.com/files/174643/Ivanti-Sentry-Authentication-Bypass-Remote-Code-Execution.htmlExploitThird Party AdvisoryVDB Entry
- www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-38035Government ResourceUS Government Resource