CVEvulnerability

CVE-2024-7061

7.8 HIGH Published 2024-08-07 Modified 2026-06-17 Official page ↗

Status: Analyzed
Published: 2024-08-07
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS 3.1 ([email protected]): 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-22, CWE-427

Description

Okta Verify for Windows is vulnerable to privilege escalation through DLL hijacking. The vulnerability is fixed in Okta Verify for Windows version 5.0.2. To remediate this vulnerability, upgrade to 5.0.2 or greater.

Affected configurations

• okta verify (< 5.0.2)

Weakness · CWE (2)

CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
CWE-427 Uncontrolled Search Path Element weakness

References

https://help.okta.com/oie/en-us/content/topics/releasenotes/oie-ov-release-notes.htm#panel4 Not Applicable, Release Notes
https://trust.okta.com/security-advisories/okta-verify-for-windows-privilege-escalation-cve-2024-7061/ Vendor Advisory

CVE-2024-7061

Description

Affected configurations

Related

Weakness · CWE (2)

References