CVE-2022-1030

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Okta Advanced Server Access Client for Linux and macOS prior to version 1.58.0 was found to be vulnerable to command injection via a specially crafted URL. An attacker, who has knowledge of a valid team name for the victim and also knows a valid target host where the user has access, can execute commands on the local system.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

No affected versions have been published.

Timeline

Published: Mar 23, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-10317.8Use After Free in op_is_set_bp in GitHub repository radareorg/radare2 prior to 5.6.6.CVE-2022-10327.2Insecure deserialization of not validated module file in GitHub repository crater-invoice/crater prior to 6.0.6.CVE-2022-10337.8Unrestricted Upload of File with Dangerous Type in GitHub repository crater-invoice/crater prior to 6.0.6.CVE-2022-10347.2There is a Unrestricted Upload of File vulnerability in ShowDoc v2.10.3 in GitHub repository star7th/showdoc prior to 2.10.4.CVE-2022-10355.5Segmentation Fault caused by MP4Box -lsr in GitHub repository gpac/gpac prior to 2.1.0-DEV.CVE-2022-10367.5Able to create an account with long password leads to memory corruption / Integer Overflow in GitHub repository microweber/microweber prior CVE-2022-10377.2The EXMAGE WordPress plugin before 1.0.7 does to ensure that images added via URLs are external images, which could lead to a blind SSRF iss CVE-2022-10387.8A potential security vulnerability has been identified in the HP Jumpstart software, which might allow escalation of privilege. HP is recomm CVE-2022-10399.8The weak password on the web user interface can be exploited via HTTP or HTTPS. Once such access has been obtained, the other passwords can CVE-2022-10409.8An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v CVE-2022-10418.8In Zephyr bluetooth mesh core stack, an out-of-bound write vulnerability can be triggered during provisioning.CVE-2022-10428.8In Zephyr bluetooth mesh core stack, an out-of-bound write vulnerability can be triggered during provisioning.