Okta Verify 9.25.1/9.27.0 on iOS Push Notification ContextExtension improper authentication

Summaryinfo

A vulnerability, which was classified as critical, has been found in Okta Verify 9.25.1/9.27.0 on iOS. Affected by this vulnerability is the function ContextExtension of the component Push Notification Handler. The manipulation leads to improper authentication. This vulnerability is referenced as CVE-2024-10327. Remote exploitation of the attack is possible. No exploit is available. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as critical, has been found in Okta Verify 9.25.1/9.27.0 on iOS. This issue affects the function ContextExtension of the component Push Notification Handler. The manipulation with an unknown input leads to a improper authentication vulnerability. Using CWE to declare the problem leads to CWE-287. When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

A vulnerability in Okta Verify for iOS versions 9.25.1 (beta) and 9.27.0 (including beta) allows push notification responses through the iOS ContextExtension feature allowing the authentication to proceed regardless of the user’s selection. When a user long-presses the notification banner and selects an option, both options allow the authentication to succeed. The ContextExtension feature is one of several push mechanisms available when using Okta Verify Push on iOS devices. The vulnerable flows include: * When a user is presented with a notification on a locked screen, the user presses on the notification directly and selects their reply without unlocking the device; * When a user is presented with a notification on the home screen and drags the notification down and selects their reply; * When an Apple Watch is used to reply directly to a notification. A pre-condition for this vulnerability is that the user must have enrolled in Okta Verify while the Okta customer was using Okta Classic. This applies irrespective of whether the organization has since upgraded to Okta Identity Engine.

The advisory is shared at trust.okta.com. The identification of this vulnerability is CVE-2024-10327 since 10/24/2024. The exploitation is known to be easy. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. It demands that the victim is doing some kind of user interaction. Technical details are known, but no exploit is available.

Upgrading eliminates this vulnerability. The upgrade is hosted for download at help.okta.com.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• iOS App Software

Vendor

• Okta

Name

• Verify

Version

• 9.25.1
• 9.27.0

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion