CVE-2022-1030

CVE-2022-1030: fallo en Okta Advanced Server Access Client

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Okta Advanced Server Access Client

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

3Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackepss 1.5%
Okta Advanced Server Access Client for Linux and macOS prior to version 1.58.0 was found to be vulnerable to command injection via a specially crafted URL. An attacker, who has knowledge of a valid team name for the victim and also knows a valid target host where the user has access, can execute commands on the local system.
Productos afectados
Okta · Advanced Server Access Client