Vulnerability · Published Mar 27, 2024 · Assigned by Okta
CVE-2024-0980
High 7.1
In plain English
A high-severity path traversal in Okta Verify for Windows from Okta. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 40% of all known vulnerabilities).
Severity (CVSS 3.1)7.1High
Exploit odds (30 days)0.5%top 60.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
The Auto-update service for Okta Verify for Windows is vulnerable to two flaws which in combination could be used to execute arbitrary code.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Okta | Okta Verify for Windows | 0 – before 4.10.7 |
Weakness: CWE-22, CWE-427 · Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H