AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

OktaOKTA-05VHAP4

Okta Classic Application Sign-On Policy Bypass

Okta

Published Oct 4, 2024

Unrated
No fix yet
Okta advisory

A vulnerability was identified in specific Okta configurations whereby ​​an attacker with valid credentials could bypass configured conditions within application-specific sign-on policies.

Affected versions

The source does not list versions here. See the source advisory for affected products and fixes.
Details and references
Severity from
no source yet

More Okta advisories

All Okta
UnscoredNov 1, 2024Okta AD/LDAP Delegated Authentication - Username Above 52 Characters Security AdvisoryOKTA-1QNIVM9no fix yetHigh 7.1Nov 1, 2024Okta Verify Desktop MFA for Windows Passwordless LoginCVE-2024-9191no fix yetHigh 8.1Oct 24, 2024Okta Verify for iOS ContextExtensionCVE-2024-10327no fix yetMedium 5.5Aug 7, 2024Okta Verify for Windows Privilege EscalationCVE-2024-7061no fix yetHigh 7.1Jul 22, 2024Okta Browser Plugin Reflected Cross-Site ScriptingCVE-2024-0981no fix yetHigh 7.1Mar 26, 2024Okta Verify for Windows Auto-update Arbitrary Code ExecutionCVE-2024-0980no fix yet