CVE-2022-24295

2022-02-2117:49:32

Okta

www.cve.org

9.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.3%

JSON

Okta Advanced Server Access Client for Windows prior to version 1.57.0 was found to be vulnerable to command injection via a specially crafted URL.

CNA Affected

[
  {
    "product": "Okta Advanced Server Access Client",
    "vendor": "Okta",
    "versions": [
      {
        "status": "affected",
        "version": "Prior to version 1.57.0"
      }
    ]
  }
]

References

trust.okta.com/security-advisories/okta-advanced-server-access-client-cve-2022-24295