Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-41724

A command injection vulnerability in Ivanti Sentry prior to 9.19.0 allows unauthenticated threat actor to execute arbitrary commands on the underlying operating system of the appliance within the same physical or logical network.

Published

2024-03-31T02:15:07.660

Last Modified

2024-11-21T08:21:33.043

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.8 (HIGH)

Weaknesses

Type: Primary
CWE-77
Type: Secondary
CWE-94

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	ivanti	standalone_sentry	< 9.19.0	Yes

References

https://forums.ivanti.com/s/article/CVE-2023-41724-Remote-Code-Execution-for-Ivanti-Standalone-Sentry Patch, Vendor Advisory ([email protected])
https://forums.ivanti.com/s/article/CVE-2023-41724-Remote-Code-Execution-for-Ivanti-Standalone-Sentry Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)