CyberRota Analysis
AI-GeneratedThe Okta Privileged Access client is vulnerable due to a flaw in its URL handler that fails to properly terminate command-line arguments, allowing values starting with a hyphen to be misinterpreted as command-line flags. This can lead to unintended modifications in the behavior of the SSH client, potentially compromising secure access. Organizations utilizing this client should prioritize addressing this vulnerability to mitigate risks associated with unauthorized command execution.
Original NVD Description
The Okta Privileged Access client URL handler does not insert an option terminator before appending the target value to the command-line arguments. When a scaleft:// protocol handler link contains a value beginning with a hyphen, the underlying CLI framework interprets it as a command-line flag, causing unintended modification of the SSH client's behavior.