PT-2024-38050 · Okta · Okta Verify For Windows

Ryan Wincey · Published 2024-08-07 · Updated 2024-08-28 · CVE-2024-7061

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Okta Verify for Windows versions prior to 5.0.2

Description The issue concerns a privilege escalation vulnerability through DLL hijacking. The vulnerability is fixed in version 5.0.2.

Recommendations For versions prior to 5.0.2, upgrade to version 5.0.2 or greater to resolve the issue.

Fix

Path traversal

Uncontrolled Search Path Element

Weakness Enumeration

CWE-22

CWE-427

Related Identifiers

CVE-2024-7061

Affected Products

Okta Verify For Windows

References · 5

• https://trust.okta.com/security-advisories/okta-verify-for-windows-privilege-escalation-cve-2024-7061 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-7061 · Security Note
• https://osv.dev/vulnerability/CVE-2024-7061 · Vendor Advisory
• https://help.okta.com/oie/en-us/content/topics/releasenotes/oie-ov-release-notes.htm#panel4 · Note
• https://t.me/cvedetector/2719 · Telegram Post