AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

OktaOKTA-0FN7LLB

Okta Verify for iOS ContextExtension

Okta

CVE-2024-10327 · Published Oct 24, 2024

High8.1
No fix yet
Okta advisory

A vulnerability in Okta Verify for iOS versions 9.25.1 (beta) and 9.27.0 (including beta) allows push notification responses through the iOS ContextExtension feature to bypass proper authentication validation.

Affected versions

The source does not list versions here. See the source advisory for affected products and fixes.

Changes since it was listed

SeverityOct 13Severity: Unrated to High
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Severity from
NVD

More Okta advisories

All Okta
Medium 6.9Apr 30, 2025JWT Invalid Signature Validation in Auth0 Account Linking ExtensionsCVE-2025-46345no fix yetUnscoredNov 1, 2024Okta AD/LDAP Delegated Authentication - Username Above 52 Characters Security AdvisoryOKTA-1QNIVM9no fix yetHigh 7.1Nov 1, 2024Okta Verify Desktop MFA for Windows Passwordless LoginCVE-2024-9191no fix yetUnscoredOct 4, 2024Okta Classic Application Sign-On Policy BypassOKTA-05VHAP4no fix yetMedium 5.5Aug 7, 2024Okta Verify for Windows Privilege EscalationCVE-2024-7061no fix yetHigh 7.1Jul 22, 2024Okta Browser Plugin Reflected Cross-Site ScriptingCVE-2024-0981no fix yet