CVE-2023-0392

The LDAP Agent Update service with versions prior to 5.18 used an unquoted path, which could allow arbitrary code execution.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.7 MEDIUM
LOCAL
LOW
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Affected Products (NVD)
VendorProductVersion
oktaldap_agent
𝑥
< 5.18
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
oktaldap_agent
𝑥
< 5.18
ADP
Common Weakness Enumeration
References
https://trust.okta.com/security-advisories/okta-ldap-agent-cve-2023-0392
https://trust.okta.com/security-advisories/okta-ldap-agent-cve-2023-0392