AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

OktaOKTA-0KWDW58

Okta Advanced Server Access Client

Okta

CVE-2022-24295 · Published Feb 17, 2022

High8.8
No fix yet
Okta advisory

Okta Advanced Server Access Client for Windows prior to version 1.57.0 was found to be vulnerable to command injection via a specially crafted URL.

Affected versions

The source does not list versions here. See the source advisory for affected products and fixes.

Changes since it was listed

SeverityOct 16Severity: Unrated to High
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity from
NVD

More Okta advisories

All Okta
Low 3.9Sep 1, 2022Okta Active Directory AgentCVE-2022-1697no fix yetHigh 8.8Mar 21, 2022Okta Advanced Server Access ClientCVE-2022-1030no fix yetMedium 5.9Jan 26, 2022Okta RADIUS Server AgentCVE-2021-45105no fix yetCritical 9.0Jan 26, 2022Okta On-Prem MFA AgentCVE-2021-45046no fix yetCritical 9.0Jan 26, 2022Okta RADIUS Server AgentCVE-2021-45046no fix yetCritical 10.0Jan 26, 2022Okta On-Prem MFA AgentCVE-2021-44228no fix yet