Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Okta Component: Verify Clear all filters
TI-2024-08528 CVE-2024-9191 · GHSA-vfhr-8j89-9v9w

Incorrect default permissions in Okta Verify for Windows

Priority LOW 36

The Okta Device Access features, provided by the Okta Verify agent for Windows, provides access to the OktaDeviceAccessPipe, which enables attackers in a compromised device to retrieve passwords associated with Desktop M…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00239 Published 2024-11-01 Fixed in 5.3.3 CWE-276
TI-2024-06543 CVE-2024-7061 · GHSA-jh6g-rh4q-hcw2

Path traversal in Okta Verify for Windows

Priority LOW 33

Okta Verify for Windows is vulnerable to privilege escalation through DLL hijacking.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00214 Published 2024-08-07 Fixed in 5.0.1, 5.0.2 CWE-22