Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Okta Advanced Server Access Client versions 1.13.1 through 1.65.0 are vulnerable to command injection due to the third party library webbrowser. An outdated library, webbrowser, used by the ASA client was found to be vulnerable to command injection. To exploit this issue, an attacker would need to phish the user to enter an attacker controlled server URL during enrollment.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Okta Advanced Server Access Client 命令注入漏洞
Vulnerability Description
Okta Advanced Server Access Client是美国Okta公司的为云和本地基础架构提供零信任身份和访问管理。 Okta Advanced Server Access Client 1.13.1版本至1.65.0版本存在安全漏洞，该漏洞源于存在命令注入漏洞。
CVSS Information
N/A
Vulnerability Type
N/A