CVE-2022-1697

BASSO 3.9CVE-2022-1697 · Published 06/09/2022 · updated 17/06/2026

In breve

CVE-2022-1697 è una vulnerabilità BASSO (CVSS 3.9) che riguarda active directory agent (okta).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.25%, superiore al 17.0% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
active directory agent okta	`= 3.10.0= 3.11.0= 3.8.0= 3.9.0`	No fix yet

Description

Okta Active Directory Agent versions 3.8.0 through 3.11.0 installed the Okta AD Agent Update Service using an unquoted path. Note: To remediate this vulnerability, you must uninstall Okta Active Directory Agent and reinstall Okta Active Directory Agent 3.12.0 or greater per the documentation.

References

help.okta.com/en-us/Content/Topics/Directory/ad-agent-update.htm · Vendor Advisory
support.okta.com/help/s/article/Security-Notice-CVE-2022-1697-FAQ · Mitigation
trust.okta.com/security-advisories/okta-active-directory-agent-cve-2022-1697 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free