VULNERABILITY INTELLIGENCE

CVE-2024-9875

CVSS score7.1 HIGH
EPSS probability0.24%
CISA KEVNot currently listed
Published2024-11-21
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Description

Okta Privileged Access server agent (SFTD) versions 1.82.0 to 1.84.0 are affected by a privilege escalation vulnerability when the sudo command bundles feature is enabled. To remediate this vulnerability, upgrade the Okta Privileged Access server agent (SFTD) to version 1.87.1 or greater.

Weakness classification

  • psirt@okta.com: CWE-20

Primary references