CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2023-08-21
Ivanti MobileIron Sentry MICS Admin Portal Authentication Bypass and Remote Code Execution Vulnerability (CVE-2023-38035) Urgent Security Advisory
[Affected Scope] Ivanti MobileIron Sentry versions 9.18.0 and below with MICS (Mobile IT Connector System) Admin Portal enabled
[Impact] Unauthenticated attackers can bypass authentication controls on the administrative interface, leading to remote code execution (RCE) and full system compromise
[Mitigation] Immediately apply the official vendor patches and restrict external access to the MICS administrative port (default TCP 8443)