CyberRota Analysis
AI-GeneratedThe vulnerability in Okta Access Gateway arises from improper input sanitization and regular expression evaluation during the Protected Rule authorization check, allowing unauthorized access to application resources when a Protected Rule policy is configured. This can lead to significant security risks, as attackers may bypass authorization controls, potentially exposing sensitive data or functionalities. Organizations utilizing Okta Access Gateway should prioritize remediation efforts to mitigate the risk of exploitation.
Original NVD Description
The Okta Access Gateway improperly handles input sanitization and regular expression evaluation within its Protected Rule authorization check, resulting in an authorization bypass when an administrator has explicitly configured a Protected Rule policy on one or more application resources.