AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

OktaOKTA-09EH5IL

Okta LDAP Agent

Okta

CVE-2023-0392 · Published Sep 19, 2023

Medium6.7
No fix yet
Okta advisory

The LDAP Agent Update service used an unquoted path, which could allow arbitrary code execution.

Affected versions

The source does not list versions here. See the source advisory for affected products and fixes.

Changes since it was listed

SeverityOct 15Severity: Unrated to Medium
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Severity from
NVD

More Okta advisories

All Okta
UnscoredOct 4, 2024Okta Classic Application Sign-On Policy BypassOKTA-05VHAP4no fix yetMedium 5.5Aug 7, 2024Okta Verify for Windows Privilege EscalationCVE-2024-7061no fix yetHigh 7.1Jul 22, 2024Okta Browser Plugin Reflected Cross-Site ScriptingCVE-2024-0981no fix yetHigh 7.1Mar 26, 2024Okta Verify for Windows Auto-update Arbitrary Code ExecutionCVE-2024-0980no fix yetHigh 8.8Feb 22, 2023Okta Advanced Server Access ClientCVE-2023-0093no fix yetHigh 7.5Nov 1, 2022Okta Access Gateway AdvisoryCVE-2022-3602no fix yet