Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2023-0093

Okta Advanced Server Access Client versions 1.13.1 through 1.65.0 are vulnerable to command injection due to the third party library webbrowser. An outdated library, webbrowser, us

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Okta

Description

Okta Advanced Server Access Client versions 1.13.1 through 1.65.0 are vulnerable to command injection due to the third party library webbrowser. An outdated library, webbrowser, used by the ASA client was found to be vulnerable to command injection. To exploit this issue, an attacker would need to phish the user to enter an attacker controlled server URL during enrollment.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Okta Advanced Server Access

  • 1.13.1 through 1.65.0affected

References