AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

OktaOKTA-15CYJ0A

Okta Access Gateway

Okta

CVE-2021-28113 · Published Apr 2, 2021

Medium6.7
No fix yet
Okta advisory

A command injection vulnerability in the cookieDomain and relayDomain parameters of Okta Access Gateway in version 2020.8.4 and earlier allows attackers with admin access to the Okta Access Gateway UI to execute OS commands as a privileged system account.

Affected versions

The source does not list versions here. See the source advisory for affected products and fixes.

Changes since it was listed

SeverityOct 17Severity: Unrated to Medium
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L
Severity from
NVD

More Okta advisories

All Okta
High 8.8Mar 21, 2022Okta Advanced Server Access ClientCVE-2022-1030no fix yetHigh 8.8Feb 17, 2022Okta Advanced Server Access ClientCVE-2022-24295no fix yetMedium 5.9Jan 26, 2022Okta RADIUS Server AgentCVE-2021-45105no fix yetCritical 9.0Jan 26, 2022Okta On-Prem MFA AgentCVE-2021-45046no fix yetCritical 9.0Jan 26, 2022Okta RADIUS Server AgentCVE-2021-45046no fix yetCritical 10.0Jan 26, 2022Okta On-Prem MFA AgentCVE-2021-44228no fix yet