Unscored CVE-2022-1697 EUVD-2022-24982GHSA-v46r-3xxw-fjm7

Okta Active Directory Agent versions 3.8.0 through 3.11.0 installed the Okta AD Agent Update Service using an unquoted path. Note: To remed…

Published Sep 6, 2022 · Updated Aug 3, 2024 · Assigned by Okta

Vendor: Okta Product: Okta Active Directory Agent

Description

Okta Active Directory Agent versions 3.8.0 through 3.11.0 installed the Okta AD Agent Update Service using an unquoted path. Note: To remediate this vulnerability, you must uninstall Okta Active Directory Agent and reinstall Okta Active Directory Agent 3.12.0 or greater per the documentation.

Affected products

Vendor	Product	Affected	Fixed
Okta	Okta Active Directory Agent	3.8.0, 3.9.0, 3.10.0, 3.11.0	—

References

https://trust.okta.com/security-advisories/okta-active-directory-agent-cve-2022-1697
https://help.okta.com/en-us/Content/Topics/Directory/ad-agent-update.htm
https://support.okta.com/help/s/article/Security-Notice-CVE-2022-1697-FAQ