CVE-2022-24295

—

CVSS 3.1

8.8 high

EPSS

17%p97

Published

Feb 21, 2022 (Feb 21, 2022)

Modified

Jun 17, 2026

Description

Okta Advanced Server Access Client for Windows prior to version 1.57.0 was found to be vulnerable to command injection via a specially crafted URL.

Vendors: okta
Products: advanced server access client for windows
Weakness: CWE-94
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (16.6%)

In the news1 stories

UK's NHS Digital warns of an RCE in Okta Advanced Server Access client

Security AffairsFeb 26, 10:45 UTC · Feb 26, 2022Vulnerability CVE-2022-24295 CVE-2021-45105 CVE-2021-45046+1 CVEs

47