CVE-2023-38035 PoC — Mobileiron MobileIron Sentry 安全漏洞

Source

Associated Vulnerability

Title: Mobileiron MobileIron Sentry 安全漏洞 (CVE-2023-38035)
Description:A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an attacker to bypass authentication controls on the administrative interface due to an insufficiently restrictive Apache HTTPD configuration.

Description

CVE-2023-38035 Recon oriented exploit, extract company name contact information

Readme

# MobileIron Sentry CVE-2023-38035 information extraction

## Features

- Extract company name and contact email
- Proof of vulnerability

## Usage

```sh
./sentryexploit 192.168.0.10:8443
2023/08/24 21:29:55 Information extracted, appliance is vulnerable:
2023/08/24 21:29:55 Company: XXXX Ltd., contact: xxx@example.com
```

## Sources

- [Horizon3 deep dive](https://www.horizon3.ai/ivanti-sentry-authentication-bypass-cve-2023-38035-deep-dive/)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →