#VU73180 OS Command Injection in Okta Advanced Server Access Client for Linux and Okta Advanced Server Access Client for macOS - CVE-2022-1030

Vulnerability identifier: #VU73180

Vulnerability risk: Medium

CVSSv4.0: 4 [CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2022-1030

CWE-ID: CWE-78

Exploitation vector: Network

Exploit availability: No

Vulnerable software:
Okta Advanced Server Access Client for Linux
Client/Desktop applications / Software for system administration
Okta Advanced Server Access Client for macOS
Client/Desktop applications / Software for system administration

Vendor: Okta

Description

The vulnerability allows a remote attacker to execute arbitrary shell commands on the target system.

The vulnerability exists due to improper input validation when processing URL. A remote attacker who has knowledge of a valid team name for the victim and also knows a valid target can trick the victim to open a specially crafted URL and execute arbitrary OS commands on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation
Install updates from vendor's website.

Vulnerable software versions

Okta Advanced Server Access Client for Linux: 1.44.2 - 1.57.0

Okta Advanced Server Access Client for macOS: 1.44.2 - 1.57.0

---

External links
https://trust.okta.com/security-advisories/okta-advanced-server-access-client-cve-2022-1030

---

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.