OktaOKTA-05VHAP4
Okta Classic Application Sign-On Policy Bypass - Oct 4, 2024
UnratedPublished Oct 4, 2024
A vulnerability was identified in specific Okta configurations whereby an attacker with valid credentials could bypass configured conditions within application-specific sign-on policies.
Affected versions
The source does not list versions here. See the source advisory for affected products and fixes.
Details and references
- Severity from
- no source yet
More Okta advisories
All Okta| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Nov 12024 | Okta AD/LDAP Delegated Authentication - Username Above 52 Characters Security Advisory... | Unrated | No fix yet |
| Nov 12024 | Okta Verify Desktop MFA for Windows Passwordless Login CVE-2024-9191 - Nov 1, 2024 | Unrated | No fix yet |
| Oct 242024 | Okta Verify for iOS ContextExtension CVE-2024-10327 - Oct 24, 2024 | Unrated | No fix yet |
| Aug 72024 | Okta Verify for Windows Privilege Escalation CVE-2024-7061 - Aug 7, 2024 | Unrated | No fix yet |
| Jul 222024 | Okta Browser Plugin Reflected Cross-Site Scripting CVE-2024-0981 - Jul 22, 2024 | Unrated | No fix yet |
| Mar 262024 | Okta Verify for Windows Auto-update Arbitrary Code Execution CVE-2024-0980 - Mar 26, 2024 | Unrated | No fix yet |