CVE-2024-9875

Description

Okta Privileged Access server agent (SFTD) versions 1.82.0 to 1.84.0 are affected by a privilege escalation vulnerability when the sudo command bundles feature is enabled. To remediate this vulnerability, upgrade the Okta Privileged Access server agent (SFTD) to version 1.87.1 or greater.

Reserved 2024-10-11 | Published 2024-11-20 | Updated 2024-11-22 | Assigner Okta

Problem types

CWE-20 Improper Input Validation

Product status

Default status
unaffected

1.82.0 before 1.84.0
affected

Credits

Okta would like to thank Anvil Secure for discovering this vulnerability. reporter

References

help.okta.com/...es/advanced-server-access-release-notes.htm

cve.org (CVE-2024-9875)

nvd.nist.gov (CVE-2024-9875)

Download JSON