CVE-2022-1030 - CVE House
Back to Database
Status published High CVE-2022-1030

Okta Advanced Server Access Client for Linux and macOS prior...

Vulnerability Description

Okta Advanced Server Access Client for Linux and macOS prior to version 1.58.0 was found to be vulnerable to command injection via a specially crafted URL. An attacker, who has knowledge of a valid team name for the victim and also knows a valid target host where the user has access, can execute commands on the local system.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-1030

Credits & Attribution

No credits recorded in the NVD database.

References

More from Okta

View All →
CVE-2025-7371
Okta On-Premises Provisioning (OPP) agents log certain user data during...
Medium 6.8
CVE-2024-9875
Okta Privileged Access server agent (SFTD) versions 1.82.0 to 1.84.0...
High 7.1
CVE-2024-9191
The Okta Device Access features, provided by the Okta Verify...
High 7.1
CVE-2024-7061
Okta Verify for Windows is vulnerable to privilege escalation through...
Medium 5.5
CVE-2024-10327
A vulnerability in Okta Verify for iOS versions 9.25.1 (beta)...
High 8.1

Affected Vendor

Affected Software

Advanced Server Access Client
Vulnerable Versions:
Prior to version 1.58.0

Timeline

Official Publish: March 23rd, 2022
Last Modified: August 2nd, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.