Description
MobileIron Sentry是美国思可信（MobileIron）公司的一款智能网关产品。 MobileIron Sentry 9.18.0及之前版本存在安全漏洞，该漏洞源于Apache HTTPD 配置限制不足，允许攻击者绕过管理界面上的身份验证控制。
MobileIron Sentry /mics/services/MICSLogService 远程命令执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://stack.chaitin.com/vuldb/detail/38463df6-4fc1-4a06-a749-393c86c01076
https://qkl.seebug.org/vuldb/ssvid-99749
https://wiki.96.mk/Web%E5%AE%89%E5%85%A8/MobileIron/%EF%BC%88CVE-2020-15505%EF%BC%89MobileIron%20%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E/
https://www.ddpoc.com/DVB-2023-5419.html
https://synacktiv.com/en/advisories/ivanti-sentry-mobileiron-sentry-unauthenticated-remote-code-execution
https://www.invicti.com/web-application-vulnerabilities/mobileiron-remote-code-execution-via-logservice
https://horizon3.ai/attack-research/attack-blogs/ivanti-sentry-authentication-bypass-cve-2023-38035-deep-dive/
https://nvd.nist.gov/vuln/detail/CVE-2023-38035
https://forums.ivanti.com/s/article/CVE-2023-38035-API-Authentication-Bypass-on-Sentry-Administrator-Interface
https://www.rapid7.com/db/modules/exploit/linux/http/ivanti_sentry_misc_log_service/