Local Server Vulnerability in Okta On-Premises Provisioning Agents

CVE-2025-7371

What is CVE-2025-7371?

The On-Premises Provisioning (OPP) agents from Okta exhibit a vulnerability where they log sensitive user data during administrator-initiated password resets. An attacker with local access to servers running affected versions of OPP agents (2.2.1 to 2.3.0) can exploit this flaw to obtain personal information and temporary passwords generated during these resets. This poses a significant risk to user privacy and data security, especially if proper measures are not taken to secure access to the affected servers.

References