Skip to content
OktaOKTA-0KUM53L

Okta Verify Desktop MFA for Windows Passwordless Login CVE-2024-9191 - Nov 1, 2024

UnratedCVE-2024-9191 · Published Nov 1, 2024

A vulnerability was identified in Okta Verify for Windows, allowing retrieval of passwords associated with Desktop MFA passwordless logins in a compromised device.

Okta advisory

Affected versions

The source does not list versions here. See the source advisory for affected products and fixes.
Details and references

More Okta advisories

All Okta
Advisory
JWT Invalid Signature Validation in Auth0 Account Linking Extensions CVE-2025-46345 - Apr...
UnratedApr 30, 2025
Okta AD/LDAP Delegated Authentication - Username Above 52 Characters Security Advisory...
UnratedNov 1, 2024
Okta Verify for iOS ContextExtension CVE-2024-10327 - Oct 24, 2024
UnratedOct 24, 2024
Okta Classic Application Sign-On Policy Bypass - Oct 4, 2024
UnratedOct 4, 2024
Okta Verify for Windows Privilege Escalation CVE-2024-7061 - Aug 7, 2024
UnratedAug 7, 2024
Okta Browser Plugin Reflected Cross-Site Scripting CVE-2024-0981 - Jul 22, 2024
UnratedJul 22, 2024

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.