CNNVD-202507-1711 Information

CNNVD ID

CNNVD-202507-1711

CVE-2023-39338

  • CNNVD Published: 2025-07-12

Description (Chinese)

Ivanti Sentry是美国Ivanti公司的一个在线网关。用于管理、加密和保护移动设备和后端企业系统之间的流量。 Ivanti Sentry存在安全漏洞,该漏洞源于已认证用户可访问Sentry保护的服务,即使未获得授权。

Description (English)

Ivanti Sentry is an online gateway to Ivanti in the United States. To manage, encrypt and protect traffic between mobile equipment and back-end enterprise systems. There is a security loophole in Ivanti Sentry, which stems from the fact that certified users have access to the services protected by Sentry, even if they are not authorized.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

iWT

Published

2025-07-12

Last Modified

2026-02-24

References

https://forums.ivanti.com/s/article/CVE-2023-39338 https://access.redhat.com/security/cve/cve-2023-39338

Patch

https://forums.ivanti.com/s/article/CVE-2023-39338?language=en_US

Share on: