Lucene search
HistoryMar 28, 2024 - 12:15 a.m.
CVE-2024-0980
cve
okta verify
windows
auto-update service
vulnerability
execute arbitrary code
7.1 High
CVSS3
Attack Vector
ADJACENT
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
7.3 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
10.7%
The Auto-update service for Okta Verify for Windows is vulnerable to two flaws which in combination could be used to execute arbitrary code.
Related
cve
cve
CVE-2024-0980
2024-03-28 00:15:07
vulnrichment
vulnrichment
CVE-2024-0980
2024-03-27 23:16:37
cvelist
cvelist
CVE-2024-0980
2024-03-27 23:16:37
7.1 High
CVSS3
Attack Vector
ADJACENT
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
7.3 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
10.7%
Related for NVD:CVE-2024-0980