Ivanti Sentry Flaw: Let Attackers Access Critical APIs Used for Configuration

An unauthenticated critical API access vulnerability was found in the Ivanti Sentry interface, which could allow a threat actor to gain access to sensitive APIs that can be used to access the Ivanti administrator portal and configure Ivanti Sentry. This vulnerability can also be used to execute OS commands on the  If an attacker succeeds in exploitation, the attacker will be able to configure Ivnati Sentry, execute system commands, or write files onto the system.

Source: GBHackers

 


Date:

Categorie(s):