SE
Product
Sentry
On CISA KEVExploited in the wildRansomware-linked
7
CVEs
2
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 3High 2Medium 2Low 0
Watch
Add Sentry to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-39338 | 6.8 | Jul 12 | Enables an authenticated user (enrolled device) to access a service protected by Sentry even if they are not authorized according to the sentry policy to access that service Affected: 9.0 before 9.20 |
| CVE-2024-8540 | 5.5 | Dec 10 | Insecure permissions in Ivanti Sentry before versions 9.20.2 and 10.0.2 or 10.1.0 allow a local authenticated attacker to modify sensitive application components Affected: All versions, or not specified |
Showing 2