Ivanti Warns of Critical Zero-Day Flaw Being Actively Exploited in Sentry Software
![Image](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjoP0b8xpBpDcMF6sTBkFY0zfUC8EmTkRFz5JY5lkpbdo1XwxjswLtpL_GKGa6BSA3TeJxJ2XjsvWRYvtqZPc9qgQE6p4Vb82JWFtbwxHDji1ucnOZ6GGuTwNnvV8RES4zRwHGxdL69yCbge18NxQ400T0qWIa8pfqW1AtveM72yb9kr57iGFEpYdn1HsY/w640-h334/ivanti.jpg)
Software services provider Ivanti is warning of a new critical zero-day flaw impacting Ivanti Sentry (formerly MobileIron Sentry) that it said is being actively exploited in the wild, marking an escalation of its security woes. Tracked as CVE-2023-38035 (CVSS score: 9.8), the issue has been described as a case of authentication bypass impacting versions 9.18 and prior due to what it called an due to an insufficiently restrictive Apache HTTPD configuration. "If exploited, this vulnerability enables an unauthenticated actor to access some sensitive APIs that are used to configure the Ivanti Sentry on the administrator portal (port 8443, commonly MICS)," the company said. "While the issue has a high CVSS score, there is a low risk of exploitation for customers who do not expose port 8443 to the internet." Successful exploitation of the bug could allow an attacker to change configuration, run system commands, or write files onto the system. It's recommended th