CVE-2022-24295

ALTO 8.8CVE-2022-24295 · Published 21/02/2022 · updated 17/06/2026

In breve

CVE-2022-24295 è una vulnerabilità ALTO (CVSS 8.8) che riguarda advanced server access client for windows (okta).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 16.6%, superiore al 97.0% delle vulnerabilità.
Correzione: aggiornare a 1.57.0 o successiva.

Package	Affected versions	Patched versions
advanced server access client for windows okta	`< 1.57.0`	`1.57.0`

Okta Advanced Server Access Client for Windows prior to version 1.57.0 was found to be vulnerable to command injection via a specially crafted URL.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.