Skip to content
OpenAdvisories
High · 7.1 CVE-2024-9875 EUVD-2024-49852

Okta Privileged Access server agent (SFTD) versions 1.82.0 to 1.84.0 are affected by a privilege escalation vulnerability when the sudo com…

Published Nov 20, 2024 · Updated Nov 22, 2024 · Assigned by Okta

Description

Okta Privileged Access server agent (SFTD) versions 1.82.0 to 1.84.0 are affected by a privilege escalation vulnerability when the sudo command bundles feature is enabled. To remediate this vulnerability, upgrade the Okta Privileged Access server agent (SFTD) to version 1.87.1 or greater.

Affected products

VendorProductAffectedFixed
Okta Okta Privileged Access Server Agent (SFTD) 1.82.0 – < 1.84.0 1.84.0

References