AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

OktaOKTA-1SIAAPF

Okta Verify for Windows Auto-update Arbitrary Code Execution

Okta

CVE-2024-0980 · Published Mar 26, 2024

High7.1
No fix yet
Okta advisory

The Auto-update service for Okta Verify for Windows is vulnerable to two flaws which in combination could be used to execute arbitrary code.

Affected versions

The source does not list versions here. See the source advisory for affected products and fixes.

Changes since it was listed

SeverityOct 15Severity: Unrated to High
Details and references
CVSS 3.1
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity from
NVD

More Okta advisories

All Okta
UnscoredNov 1, 2024Okta AD/LDAP Delegated Authentication - Username Above 52 Characters Security AdvisoryOKTA-1QNIVM9no fix yetHigh 8.1Oct 24, 2024Okta Verify for iOS ContextExtensionCVE-2024-10327no fix yetUnscoredOct 4, 2024Okta Classic Application Sign-On Policy BypassOKTA-05VHAP4no fix yetMedium 5.5Aug 7, 2024Okta Verify for Windows Privilege EscalationCVE-2024-7061no fix yetHigh 7.1Jul 22, 2024Okta Browser Plugin Reflected Cross-Site ScriptingCVE-2024-0981no fix yetMedium 6.7Sep 19, 2023Okta LDAP AgentCVE-2023-0392no fix yet