This vulnerability in Ivanti Sentry allows an attacker to bypass authentication by using an alternate path or channel, enabling unauthorized administrative access. It affects versions prior to R10.8.2, R10.7.3, and R10.6.4. The CVSS 3.1 vector indicates the attack can be performed remotely without privileges or user interaction, but requires high attack complexity. The impact includes full confidentiality, integrity, and availability compromise. No vendor advisory or patch information is currently available, and the product is not a cloud service, so remediation depends on vendor updates.

A remote unauthenticated attacker can gain administrative level access to Ivanti Sentry, potentially leading to full system compromise including confidentiality, integrity, and availability impacts. This could allow the attacker to control the system, modify configurations, and disrupt services.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the affected Ivanti Sentry instances and monitor for unusual access patterns. Avoid exposing the service to untrusted networks.