Advanced Server Access vulnerabilities

2 known vulnerabilities in Advanced Server Access from Okta. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Advanced Server Access: Improper Neutralization of Special Elements used in a Command

  CVE-2023-0093Mar 6, 2023OktaEPSS 1.06%

  Okta Advanced Server Access Client versions 1.13.1 through 1.65.0 are vulnerable to command injection due to the third party library webbrowser. An outdated library, webbrowser, used by the ASA client was found to be vulnerable to command injection. To exploit

• 8.8 High severity

  Advanced Server Access Client: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-1030Mar 23, 2022OktaEPSS 1.49%

  Okta Advanced Server Access Client for Linux and macOS prior to version 1.58.0 was found to be vulnerable to command injection via a specially crafted URL. An attacker, who has knowledge of a valid team name for the victim and also knows a valid target host wh