| Package | Affected versions | Patched versions |
|---|---|---|
| hyperdrive | ≥ 1.4.0, < 1.5.2 | 1.5.2 |
The Okta Hyperdrive Agent writes the decoded SAML bearer assertion to a local application log file at the default log level on every successful MFA completion. This insertion of sensitive information into the log file makes a live authentication credential readable by any local user with access to the log file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free