Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Insecure permissions in Ivanti Sentry before versions 9.20.2 and 10.0.2 or 10.1.0 allow a local authenticated attacker to modify sensitive application components.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Vulnerability Type
关键资源的不正确权限授予
Vulnerability Title
Ivanti Sentry 安全漏洞
Vulnerability Description
Ivanti Sentry是美国Ivanti公司的一个在线网关。用于管理、加密和保护移动设备和后端企业系统之间的流量。 Ivanti Sentry存在安全漏洞，该漏洞源于权限管理不安全。攻击者利用该漏洞可以修改敏感应用程序组件。
CVSS Information
N/A
Vulnerability Type
N/A