← back
CVE-2025-67505

Race condition in the Okta Java SDK

CVSS 8.4 HIGHEPSS 0.2%CWE-362
Okta Java Management SDK facilitates interactions with the Okta management API. In versions 11.0.0 through 20.0.0, race conditions may arise from concurrent requests using the ApiClient class. This could cause a status code or response header from one request’s response to influence another request’s response. This issue is fixed in version 20.0.1.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L
Affected products
okta · okta-sdk-java

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →