CVE-2024-9875

7.1 highEPSS 0.2%

High (7.1). EPSS 0.2% chance of exploitation in the next 30 days.

Okta Privileged Access server agent (SFTD) versions 1.82.0 to 1.84.0 are affected by a privilege escalation vulnerability when the sudo command bundles feature is enabled. To remediate this vulnerability, upgrade the Okta Privileged Access server agent (SFTD) to version 1.87.1 or greater.

Severity

CVSS 3.1

7.1 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 14% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2024-11-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://help.okta.com/asa/en-us/content/topics/releasenotes/advanced-server-access-release-notes.htm

Check your stack JSON