CVE-2023-38035

CVE-2023-38035 is a critical software vulnerability discovered in Ivanti's Sentry software, formerly known as MobileIron Sentry. This flaw, rated 9.8 on the CVSS scale, affects versions 9.18 and earlier of the product. The vulnerability was identified by cybersecurity company mnemonic and is characterized by an insufficiently restrictive Apache HTTPD configuration. This allows threat actors to bypass API authentication, thereby gaining access to sensitive Sentry administrator interface APIs. One month after the vulnerability was discovered, hackers began exploiting it in limited and targeted attacks. A third zero-day flaw in Ivanti's Sentry software, CVE-2023-38035, was used to bypass API authentication on vulnerable devices. The exploitation of this vulnerability has serious implications, including unauthorized access to sensitive information and potential disruption of services. Protection against this threat is provided by Check Point IPS blade. However, given the severity of the vulnerability, organizations using affected versions of Ivanti's Sentry software are strongly advised to apply patches or updates as soon as they become available. In the meantime, implementing additional security measures such as monitoring network traffic and restricting access to sensitive APIs can help mitigate the risk.