CVE-2024-7061

CVSS 5.5 MEDIUMEPSS 0.2%CWE-22 CWE-427

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 5.5EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado

Lifecycle

07 Aug 2024Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Okta Verify for Windows is vulnerable to privilege escalation through DLL hijacking. The vulnerability is fixed in Okta Verify for Windows version 5.0.2. To remediate this vulnerability, upgrade to 5.0.2 or greater.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected products

Okta · Okta Verify for Windows

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://help.okta.com/oie/en-us/content/topics/releasenotes/oie-ov-release-notes.htm#panel4 https://trust.okta.com/security-advisories/okta-verify-for-windows-privilege-escalation-cve-2024-7061/