Main
Vulnerability Database
Exploits
ID:9316 - Exploit for Improper Authentication in MobileIron Sentry - CVE-2023-38035
ID:9316 - Exploit for Improper Authentication in MobileIron Sentry - CVE-2023-38035
Published: September 13, 2023
Vulnerability identifier: #VU79810
Vulnerability risk: Critical
CVE-ID: CVE-2023-38035
CWE-ID: CWE-287
Exploitation vector: Remote access
Vulnerable software:
MobileIron Sentry
MobileIron Sentry
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to bypass authentication process.
The vulnerability exists due to missing authentication on certain APIs. A remote attacker can send a specially crafted HTTP request to port 8443/TCP, bypass authentication process and execute arbitrary code on the system.
Note, the vulnerability is being actively exploited in the wild.
Remediation
Install updates from vendor's website.