← Back

CVE-2022-1697

nvd nist
Published: Sep 6, 2022Modified: Nov 21, 2024

JSON object

Loading...
3.9
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L
Exploitability: 0.5 / Impact: 3.4
Source: NVD

Description

Okta Active Directory Agent versions 3.8.0 through 3.11.0 installed the Okta AD Agent Update Service using an unquoted path. Note: To remediate this vulnerability, you must uninstall Okta Active Directory Agent and reinstall Okta Active Directory Agent 3.12.0 or greater per the documentation.

Affected (4)

Okta
1 product
Active Directory Agent
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Okta
Active Directory Agent
Version 3.10.0
Active Directory Agent
Version 3.11.0
Active Directory Agent
Version 3.8.0
Active Directory Agent
Version 3.9.0

Related CWEs

CWE-428
Unquoted Search Path or Element
The product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path.

References (6)

Source: psirt@okta.com
Vendor Advisory
Source: psirt@okta.com
MitigationVendor Advisory
Source: psirt@okta.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.