Okta Advanced Server Access Client for Linux and macOS prior to version 1.58.0 was found to be vulnerable to command injection via a specially crafted URL. An attacker, who has knowledge of a valid team name for the victim and also knows a valid target host where the user has access, can execute commands on the local system.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: Okta

Published:

Updated: 2024-08-02T23:47:43.281Z

Reserved: 2022-03-18T00:00:00

Link: CVE-2022-1030

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-03-23T20:15:10.757

Modified: 2024-11-21T06:39:53.480

Link: CVE-2022-1030

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.