The following table lists the changes that have been made to the
CVE-2023-39338 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.
-
New CVE Received
by [email protected]Jul. 12, 2025
Action Type Old Value New Value Added Description Enables an authenticated user (enrolled device) to access a service protected by Sentry even if they are not authorized according to the sentry policy to access that service. It does not enable the user to authenticate to or use the service, it just provides the tunnel access. Added CVSS V3 AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N Added Reference https://forums.ivanti.com/s/article/CVE-2023-39338