Refine your search

1 vulnerability found for Okta Active Directory Agent by Okta

CVE-2022-1697 (GCVE-0-2022-1697)
Vulnerability from cvelistv5
Published
2022-09-06 17:18
Modified
2024-08-03 00:10
Severity ?
CWE
  • Unquoted Search Path or Element
Summary
Okta Active Directory Agent versions 3.8.0 through 3.11.0 installed the Okta AD Agent Update Service using an unquoted path. Note: To remediate this vulnerability, you must uninstall Okta Active Directory Agent and reinstall Okta Active Directory Agent 3.12.0 or greater per the documentation.
Impacted products
Vendor Product Version
Okta Okta Active Directory Agent Version: 3.8.0, 3.9.0, 3.10.0, 3.11.0
Create a notification for this product.
Show details on NVD website


{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T00:10:03.895Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://trust.okta.com/security-advisories/okta-active-directory-agent-cve-2022-1697"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://help.okta.com/en-us/Content/Topics/Directory/ad-agent-update.htm"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.okta.com/help/s/article/Security-Notice-CVE-2022-1697-FAQ"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Okta Active Directory Agent",
          "vendor": "Okta",
          "versions": [
            {
              "status": "affected",
              "version": "3.8.0, 3.9.0, 3.10.0, 3.11.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Okta Active Directory Agent versions 3.8.0 through 3.11.0 installed the Okta AD Agent Update Service using an unquoted path. Note: To remediate this vulnerability, you must uninstall Okta Active Directory Agent and reinstall Okta Active Directory Agent 3.12.0 or greater per the documentation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Unquoted Search Path or Element",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-09-13T15:13:26.000Z",
        "orgId": "59b22baa-87b2-4371-8e4a-e080df12f74a",
        "shortName": "Okta"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://trust.okta.com/security-advisories/okta-active-directory-agent-cve-2022-1697"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://help.okta.com/en-us/Content/Topics/Directory/ad-agent-update.htm"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.okta.com/help/s/article/Security-Notice-CVE-2022-1697-FAQ"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@okta.com",
          "ID": "CVE-2022-1697",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Okta Active Directory Agent",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "3.8.0, 3.9.0, 3.10.0, 3.11.0"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Okta"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Okta Active Directory Agent versions 3.8.0 through 3.11.0 installed the Okta AD Agent Update Service using an unquoted path. Note: To remediate this vulnerability, you must uninstall Okta Active Directory Agent and reinstall Okta Active Directory Agent 3.12.0 or greater per the documentation."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Unquoted Search Path or Element"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://trust.okta.com/security-advisories/okta-active-directory-agent-cve-2022-1697",
              "refsource": "MISC",
              "url": "https://trust.okta.com/security-advisories/okta-active-directory-agent-cve-2022-1697"
            },
            {
              "name": "https://help.okta.com/en-us/Content/Topics/Directory/ad-agent-update.htm",
              "refsource": "MISC",
              "url": "https://help.okta.com/en-us/Content/Topics/Directory/ad-agent-update.htm"
            },
            {
              "name": "https://support.okta.com/help/s/article/Security-Notice-CVE-2022-1697-FAQ",
              "refsource": "MISC",
              "url": "https://support.okta.com/help/s/article/Security-Notice-CVE-2022-1697-FAQ"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "59b22baa-87b2-4371-8e4a-e080df12f74a",
    "assignerShortName": "Okta",
    "cveId": "CVE-2022-1697",
    "datePublished": "2022-09-06T17:18:50.000Z",
    "dateReserved": "2022-05-12T00:00:00.000Z",
    "dateUpdated": "2024-08-03T00:10:03.895Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}