CVE-2024-9875

{"id": "CVE-2024-9875", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "psirt@okta.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.1, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 1.8}]}, "published": "2024-11-21T09:54:49.903", "references": [{"url": "https://help.okta.com/asa/en-us/content/topics/releasenotes/advanced-server-access-release-notes.htm", "source": "psirt@okta.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "psirt@okta.com", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "Okta Privileged Access server agent (SFTD) versions 1.82.0 to 1.84.0 are affected by a privilege escalation vulnerability when the sudo command bundles feature is enabled. To remediate this vulnerability, upgrade the Okta Privileged Access server agent (SFTD) to version 1.87.1 or greater."}, {"lang": "es", "value": "Las versiones 1.82.0 a 1.84.0 de Okta Privileged Access server agent (SFTD) se ven afectadas por una vulnerabilidad de escalada de privilegios cuando la funci\u00f3n de paquetes de comandos sudo est\u00e1 habilitada. Para solucionar esta vulnerabilidad, actualice el agente de servidor de acceso privilegiado de Okta (SFTD) a la versi\u00f3n 1.87.1 o posterior."}], "lastModified": "2024-11-21T13:57:24.187", "sourceIdentifier": "psirt@okta.com"}