CVE-2022-24295: Code Injection
Okta Advanced Server Access Client for Windows prior to version 1.57.0 was found to be vulnerable to command injection via a specially crafted URL.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-24295?
CVE-2022-24295 is a vulnerability found in Okta Advanced Server Access Client for Windows prior to version 1.57.0.
How severe is CVE-2022-24295?
CVE-2022-24295 has a severity rating of 8.8, which is considered high.
How does CVE-2022-24295 affect Okta Advanced Server Access Client for Windows?
CVE-2022-24295 allows command injection via a specially crafted URL in Okta Advanced Server Access Client for Windows prior to version 1.57.0.
How can I fix CVE-2022-24295?
To fix CVE-2022-24295, update your Okta Advanced Server Access Client for Windows to version 1.57.0 or above.
Where can I find more information about CVE-2022-24295?
You can find more information about CVE-2022-24295 in the Okta Security Advisories at [this link](https://trust.okta.com/security-advisories/okta-advanced-server-access-client-cve-2022-24295).