AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

OktaOKTA-0KUM53L

Okta Verify Desktop MFA for Windows Passwordless Login

Okta

CVE-2024-9191 · Published Nov 1, 2024

High7.1
No fix yet
Okta advisory

A vulnerability was identified in Okta Verify for Windows, allowing retrieval of passwords associated with Desktop MFA passwordless logins in a compromised device.

Affected versions

The source does not list versions here. See the source advisory for affected products and fixes.

Changes since it was listed

SeverityOct 13Severity: Unrated to High
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Severity from
NVD

More Okta advisories

All Okta
Medium 6.9Apr 30, 2025JWT Invalid Signature Validation in Auth0 Account Linking ExtensionsCVE-2025-46345no fix yetUnscoredNov 1, 2024Okta AD/LDAP Delegated Authentication - Username Above 52 Characters Security AdvisoryOKTA-1QNIVM9no fix yetHigh 8.1Oct 24, 2024Okta Verify for iOS ContextExtensionCVE-2024-10327no fix yetUnscoredOct 4, 2024Okta Classic Application Sign-On Policy BypassOKTA-05VHAP4no fix yetMedium 5.5Aug 7, 2024Okta Verify for Windows Privilege EscalationCVE-2024-7061no fix yetHigh 7.1Jul 22, 2024Okta Browser Plugin Reflected Cross-Site ScriptingCVE-2024-0981no fix yet