Description
The LDAP Agent Update service with versions prior to 5.18 used an unquoted path, which could allow arbitrary code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Okta | LDAP Agent | < 5.18 | 5.18 |
Low · 3.9
CVE-2023-0392
EUVD-2023-12453GHSA-xg45-v5rp-r5m2
The LDAP Agent Update service with versions prior to 5.18 used an unquoted path, which could allow arbitrary code execution.
Published Nov 8, 2023 · Updated Sep 4, 2024 · Assigned by Okta