2 lines
3.2 KiB
JSON
2 lines
3.2 KiB
JSON
{"affected":[{"affectedData":[{"product":"Okta Active Directory Agent","vendor":"Okta","versions":[{"status":"affected","version":"3.8.0, 3.9.0, 3.10.0, 3.11.0"}]}],"source":"psirt@okta.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:okta:active_directory_agent:3.8.0:*:*:*:*:*:*:*","matchCriteriaId":"442B7B70-70D7-488D-BAC4-7B060CCB1388","vulnerable":true},{"criteria":"cpe:2.3:a:okta:active_directory_agent:3.9.0:*:*:*:*:*:*:*","matchCriteriaId":"E0B869CF-7CFB-4288-B21B-C959136BE293","vulnerable":true},{"criteria":"cpe:2.3:a:okta:active_directory_agent:3.10.0:*:*:*:*:*:*:*","matchCriteriaId":"07931E64-69B0-4081-99A8-9FF8E6989E2C","vulnerable":true},{"criteria":"cpe:2.3:a:okta:active_directory_agent:3.11.0:*:*:*:*:*:*:*","matchCriteriaId":"C8403CAC-AA6E-4B65-B02D-0DA097D9E53B","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Okta Active Directory Agent versions 3.8.0 through 3.11.0 installed the Okta AD Agent Update Service using an unquoted path. Note: To remediate this vulnerability, you must uninstall Okta Active Directory Agent and reinstall Okta Active Directory Agent 3.12.0 or greater per the documentation."},{"lang":"es","value":"Las versiones 3.8.0 a 3.11.0 del Agente de Okta Active Directory instalan el Servicio de Actualización del Agente de Okta AD utilizando una ruta no citada. Nota: Para corregir esta vulnerabilidad, debe desinstalar el Agente de Okta Active Directory y volver a instalar el Agente de Okta Active Directory 3.12.0 o superior según la documentación"}],"id":"CVE-2022-1697","lastModified":"2026-06-17T04:22:56.347","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"LOW","baseScore":3.9,"baseSeverity":"LOW","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L","version":"3.1"},"exploitabilityScore":0.5,"impactScore":3.4,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2022-09-06T18:15:10.493","references":[{"source":"psirt@okta.com","tags":["Vendor Advisory"],"url":"https://help.okta.com/en-us/Content/Topics/Directory/ad-agent-update.htm"},{"source":"psirt@okta.com","tags":["Mitigation","Vendor Advisory"],"url":"https://support.okta.com/help/s/article/Security-Notice-CVE-2022-1697-FAQ"},{"source":"psirt@okta.com","tags":["Vendor Advisory"],"url":"https://trust.okta.com/security-advisories/okta-active-directory-agent-cve-2022-1697"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://help.okta.com/en-us/Content/Topics/Directory/ad-agent-update.htm"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"],"url":"https://support.okta.com/help/s/article/Security-Notice-CVE-2022-1697-FAQ"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://trust.okta.com/security-advisories/okta-active-directory-agent-cve-2022-1697"}],"sourceIdentifier":"psirt@okta.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-428"}],"source":"nvd@nist.gov","type":"Primary"}]}
|