PT-2025-30435 · Okta · Okta On-Premises Provisioning Agent

Published 2025-07-22 · Updated 2025-07-22 · CVE-2025-7371

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Okta On-Premises Provisioning (OPP) agents versions 2.2.1 through 2.3.0

Description Okta On-Premises Provisioning (OPP) agents log specific user data during administrator-initiated password resets. An attacker gaining access to the local servers running these agents can retrieve user personal information and temporary passwords generated during password reset operations.

Recommendations For versions 2.2.1 through 2.3.0, ensure that local servers running OPP agents are adequately secured to prevent unauthorized access.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2025-7371

Affected Products

Okta On-Premises Provisioning Agent

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-7371 · Security Note
• https://help.okta.com/oie/en-us/content/topics/settings/version_histories/ver_history_opp_agent.htm · Patch
• https://trust.okta.com · Vendor Advisory
• https://t.me/cvetracker/28395 · Telegram Post
• https://twitter.com/CVEnew/status/1947687624723824645 · Twitter Post
• https://t.me/CVEtracker/28395 · Telegram Post