Ivanti Addressed A New Zero-Day Flaw in Ivanti Sentry

Red | Vulnerability Report

The zero-day vulnerability (CVE-2023-38035) in Ivanti Sentry (versions 9.18 and earlier) allows unauthenticated access to sensitive APIs via port 8443, posing a risk of configuration manipulation and system compromise. Apply specific RPM scripts and restrict external access for mitigation

Reduce real exposure. Not just vulnerability volume.