CVE-2021-28113

概要

参考情報

• packetstormsecurity.com/files/163428/Okta-Access-Gateway-2020.5.5-Authenticated-Remote-Root.html · Exploit
• okta.com/security-advisories/cve-2021-28113 · Vendor Advisory

access gateway のその他の脆弱性

• CVE-2026-78630中 6.7The Okta Access Gateway does not neutralize shell metacharacters in SNMP configuration values before a privileged script uses them to constr…
• CVE-2026-78626中 6.5The Okta Access Gateway improperly handles input sanitization and regular expression evaluation within its Protected Rule authorization chec…
• CVE-2026-78625中 6.7The Okta Access Gateway does not sanitize dashboard label values before writing them into generated PHP configuration files. The generated f…
• CVE-2026-78624中 4.9The Okta Access Gateway backup restore function does not validate the filename embedded in an encrypted backup payload. This results in writ…
• CVE-2026-78623緊急 9.9The Okta Access Gateway does not sanitize SAML assertion values before interpolating them into database queries in the advanced mode datasto…