CyberRota Analysis
AI-GeneratedThe Okta Access Gateway management console is vulnerable due to improper handling of user-supplied input, allowing an authenticated administrator to execute arbitrary code via the eval() function during an SSH session. This flaw can lead to unauthorized code execution with the console's privileges, posing a significant risk to system integrity. Organizations using the Okta Access Gateway should prioritize remediation to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The Okta Access Gateway management console passes user-supplied input to eval() without sanitization during an authenticated administrator SSH session. As a result, the unsanitized input is executed directly, leading to code execution with the privileges of the management console.