CVE-2023-0392

2023-11-0820:37:14

Okta

github.com

cve-2023

ldap agent update

unquoted path

arbitrary code execution

AI Score

7.9

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

The LDAP Agent Update service with versions prior to 5.18 used an unquoted path, which could allow arbitrary code execution.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:okta:ldap_agent:*:*:*:*:*:*:*:*"
    ],
    "vendor": "okta",
    "product": "ldap_agent",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "5.18",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]