Veille CVE

Recherche « Okta Hyperdrive Agent »

2 CVE

Critique 0 Élevée 0 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Okta Hyperdrive Agent » ✕
  1. CVE-2026-78631 5.5 Moyenne

    Okta Hyperdrive Agent · Okta hyperdrive

    The Okta Hyperdrive Agent writes the decoded SAML bearer assertion to a local application log file at the default log level on every successful MFA completion. This insertion of sensitive information into the log file makes a live authentication credential readable by any local user with access to the log file.

  2. CVE-2026-78629 5.5 Moyenne

    Okta Hyperdrive Agent · Okta hyperdrive

    The Okta Hyperdrive agent plugin returns a success response without a signed SAML assertion when the organization's policy requires no MFA for a given user. The response contains only a bare boolean validation indicator with no cryptographic artifact, resulting in an unverifiable authentication verdict being delivered to the relying application.