CVE-2025-7371: Medium severity Okta On-Premises Provisioning vulnerability
Okta On-Premises Provisioning (OPP) agents log certain user data during administrator-initiated password resets. This vulnerability allows an attacker with access to the local servers running OPP agents to retrieve user personal information and temporary passwords created during password reset. You are affected by this vulnerability if the following preconditions are met: Local server running OPP agent with versions >=2.2.1 and <= 2.3.0, and User account has had an administrator-initiated password reset while using the affected versions.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Okta On-Premises Provisioning (OPP) agentto a version that resolves this vulnerability.Fixed in 2.3.1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-7371?
CVE-2025-7371 has been classified as a critical severity vulnerability due to the potential exposure of sensitive user data.
How do I fix CVE-2025-7371?
To remediate CVE-2025-7371, update the Okta On-Premises Provisioning software to the latest version beyond 2.3.0.
What type of data is exposed in CVE-2025-7371?
CVE-2025-7371 exposes personal user information and temporary passwords generated during administrator-initiated password resets.
Who is affected by CVE-2025-7371?
CVE-2025-7371 affects users of Okta On-Premises Provisioning versions between 2.2.1 and 2.3.0.
What can attackers do with CVE-2025-7371?
Attackers with access to the local servers can retrieve sensitive user information and utilize temporary passwords due to CVE-2025-7371.