Description
The Okta Privileged Access client does not reject a leading hyphen in the username portion of an SSH target. As a result, the value may be interpreted as a command-line option by the underlying SSH process.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Okta | Okta Privileged Access Client | 1.59.0 – < 1.111.1 | 1.111.1 |