CVE-2024-9875: Input Validation
Okta Privileged Access server agent (SFTD) versions 1.82.0 to 1.84.0 are affected by a privilege escalation vulnerability when the sudo command bundles feature is enabled. To remediate this vulnerability, upgrade the Okta Privileged Access server agent (SFTD) to version 1.87.1 or greater.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-9875?
CVE-2024-9875 has been classified as a privilege escalation vulnerability affecting specific versions of Okta Privileged Access server agent.
How do I fix CVE-2024-9875?
To remediate CVE-2024-9875, upgrade the Okta Privileged Access server agent (SFTD) to version 1.87.1 or greater.
Which versions of Okta are affected by CVE-2024-9875?
CVE-2024-9875 affects Okta Privileged Access server agent (SFTD) versions 1.82.0 to 1.84.0.
What feature enables the vulnerability in CVE-2024-9875?
The privilege escalation vulnerability in CVE-2024-9875 is triggered when the sudo command bundles feature is enabled.
Can older versions of Okta Privileged Access server agent be used safely?
No, using Okta Privileged Access server agent versions 1.82.0 to 1.84.0 poses a security risk due to CVE-2024-9875.