CVE-2021-28113

A command injection vulnerability in the cookieDomain and relayDomain parameters of Okta Access Gateway before 2020.9.3 allows attackers with admin access to the Okta Access Gateway UI to execute OS commands as a privileged system account...

CVE-2021-28113: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability in the cookieDomain and relayDomain parameters of Okta Access Gateway before 2020.9.3 allows attackers with admin access to the Okta Access Gateway UI to execute OS commands as a privileged system account...

PT-2021-17749

Name of the Vulnerable Software and Affected Versions: Okta Access Gateway versions prior to 2020.9.3 Description: A command injection issue exists in the cookieDomain and relayDomain parameters, allowing attackers with admin access to the Okta Access Gateway UI to execute OS commands as a...