Command Injection Vulnerability in Okta Advanced Server Access Client for Linux and macOS

CVE-2022-1030

What is CVE-2022-1030?

The Okta Advanced Server Access Client for Linux and macOS prior to version 1.58.0 is susceptible to a command injection vulnerability. This flaw allows an attacker, who possesses knowledge of a valid team name and a target host accessible to the user, to execute arbitrary commands on the local system through a specially crafted URL. This poses significant security risks as it can lead to unauthorized system manipulation and potential data breaches.

References