low3.9
CVE-2022-1697
Okta Active Directory Agent versions 3.8.0 through 3.11.0 installed the Okta AD Agent Update Service using an unquoted path.
Impact
Okta Active Directory Agent versions 3.8.0 through 3.11.0 installed the Okta AD Agent Update Service using an unquoted path. Note: To remediate this vulnerability, you must uninstall Okta Active Directory Agent and reinstall Okta Active Directory Agent 3.12.0 or greater per the documentation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Okta | Active Directory Agent | Versions 3.8.0, 3.9.0, 3.10.0, 3.11.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://help.okta.com/en-us/Content/Topics/Directory/ad-agent-update.htm
- https://support.okta.com/help/s/article/Security-Notice-CVE-2022-1697-FAQ
- https://trust.okta.com/security-advisories/okta-active-directory-agent-cve-2022-1697
- https://help.okta.com/en-us/Content/Topics/Directory/ad-agent-update.htm
- https://support.okta.com/help/s/article/Security-Notice-CVE-2022-1697-FAQ
- https://trust.okta.com/security-advisories/okta-active-directory-agent-cve-2022-1697