Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vq4h-6ccr-7pj2

Опубликовано: 22 июл. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.8

Описание

Okta On-Premises Provisioning (OPP) agents log certain user data during administrator-initiated password resets. This vulnerability allows an attacker with access to the local servers running OPP agents to retrieve user personal information and temporary passwords created during password reset. You are affected by this vulnerability if the following preconditions are met: Local server running OPP agent with versions >=2.2.1 and <= 2.3.0, and User account has had an administrator-initiated password reset while using the affected versions.

Okta On-Premises Provisioning (OPP) agents log certain user data during administrator-initiated password resets. This vulnerability allows an attacker with access to the local servers running OPP agents to retrieve user personal information and temporary passwords created during password reset. You are affected by this vulnerability if the following preconditions are met: Local server running OPP agent with versions >=2.2.1 and <= 2.3.0, and User account has had an administrator-initiated password reset while using the affected versions.

EPSS

Процентиль: 10%
0.00037
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-532

Связанные уязвимости

CVSS3: 6.8
nvd
около 2 месяцев назад

Okta On-Premises Provisioning (OPP) agents log certain user data during administrator-initiated password resets. This vulnerability allows an attacker with access to the local servers running OPP agents to retrieve user personal information and temporary passwords created during password reset. You are affected by this vulnerability if the following preconditions are met: Local server running OPP agent with versions >=2.2.1 and <= 2.3.0, and User account has had an administrator-initiated password reset while using the affected versions.

EPSS

Процентиль: 10%
0.00037
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-532