CVE-2023-39338 – Apache Sentry Unauthorized Service Access

CVE ID : CVE-2023-39338

Published : July 12, 2025, 4:15 a.m. | 2 hours, 1 minute ago

Description : Enables an authenticated user (enrolled device) to access a service protected by Sentry even if they are not authorized according to the sentry policy to access that service. It does not enable the user to authenticate to or use the service, it just provides the tunnel access.

Severity: 6.8 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…