AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

OktaOKTA-1QP0LXS

Okta Advanced Server Access Client

Okta

CVE-2022-1030 · Published Mar 21, 2022

High8.8
No fix yet
Okta advisory

Okta Advanced Server Access Client for Linux and macOS prior to version 1.58.0 was found to be vulnerable to command injection via a specially crafted URL. An attacker, who has knowledge of a valid team name for the victim and also knows a valid target host where the user has access, can execute commands on the local system.

Affected versions

The source does not list versions here. See the source advisory for affected products and fixes.

Changes since it was listed

SeverityOct 16Severity: Unrated to High
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity from
NVD

More Okta advisories

All Okta
Low 3.9Sep 1, 2022Okta Active Directory AgentCVE-2022-1697no fix yetHigh 8.8Feb 17, 2022Okta Advanced Server Access ClientCVE-2022-24295no fix yetMedium 5.9Jan 26, 2022Okta RADIUS Server AgentCVE-2021-45105no fix yetCritical 9.0Jan 26, 2022Okta On-Prem MFA AgentCVE-2021-45046no fix yetCritical 9.0Jan 26, 2022Okta RADIUS Server AgentCVE-2021-45046no fix yetCritical 10.0Jan 26, 2022Okta On-Prem MFA AgentCVE-2021-44228no fix yet