CVE-2026-115546: CVE-2026-115546: hatalı kimlik doğrulama

Açıklama (NVD)

Okta Access Gateway (OAG) does not validate the selected authentication source during sign-on. An authenticated user with an active session can modify the authentication source parameter, which may generate a SAML assertion granting access to the Admin Console.

Özet bilgiler

CVSS v3.1

8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

%0,42 (yüzdelik 37)

CWE

CWE-287

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• trust.okta.com
• CWE-287