Description
The Okta Verify for Windows uninstaller does not verify whether the user data directory is a filesystem junction before deleting its contents with elevated privileges. The delete operation follows the junction target, resulting in recursive deletion of unintended directory contents.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Okta | Okta Verify for Windows | 5.1.3 – < 7.0.0 | 7.0.0 |