CVE-2024-10327

{"id": "CVE-2024-10327", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "psirt@okta.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 2.8}]}, "published": "2024-10-24T21:15:11.730", "references": [{"url": "https://help.okta.com/en-us/content/topics/releasenotes/okta-verify-release-notes.htm#panel2", "source": "psirt@okta.com"}, {"url": "https://trust.okta.com/security-advisories/okta-verify-for-ios-cve-2024-10327/", "source": "psirt@okta.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "psirt@okta.com", "description": [{"lang": "en", "value": "CWE-287"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in Okta Verify for iOS versions 9.25.1 (beta) and 9.27.0 (including beta) allows push notification responses through the iOS ContextExtension feature allowing the authentication to proceed regardless of the user\u2019s selection. When a user long-presses the notification banner and selects an option, both options allow the authentication to succeed. \nThe ContextExtension feature is one of several push mechanisms available when using Okta Verify Push on iOS devices. The vulnerable flows include: \n* When a user is presented with a notification on a locked screen, the user presses on the notification directly and selects their reply without unlocking the device; \n* When a user is presented with a notification on the home screen and drags the notification down and selects their reply; \n* When an Apple Watch is used to reply directly to a notification. \n\n A pre-condition for this vulnerability is that the user must have enrolled in Okta Verify while the Okta customer was using Okta Classic. This applies irrespective of whether the organization has since upgraded to Okta Identity Engine."}, {"lang": "es", "value": "Una vulnerabilidad en Okta Verify para las versiones iOS 9.25.1 (beta) y 9.27.0 (incluida la beta) permite respuestas de notificaciones push a trav\u00e9s de la funci\u00f3n ContextExtension de iOS, lo que permite que la autenticaci\u00f3n contin\u00fae independientemente de la selecci\u00f3n del usuario. Cuando un usuario presiona prolongadamente el banner de notificaci\u00f3n y selecciona una opci\u00f3n, ambas opciones permiten que la autenticaci\u00f3n se realice correctamente. La funci\u00f3n ContextExtension es uno de los varios mecanismos push disponibles al usar Okta Verify Push en dispositivos iOS. Los flujos vulnerables incluyen: * Cuando a un usuario se le presenta una notificaci\u00f3n en una pantalla bloqueada, el usuario presiona la notificaci\u00f3n directamente y selecciona su respuesta sin desbloquear el dispositivo; * Cuando a un usuario se le presenta una notificaci\u00f3n en la pantalla de inicio y arrastra la notificaci\u00f3n hacia abajo y selecciona su respuesta; * Cuando se usa un Apple Watch para responder directamente a una notificaci\u00f3n. Una condici\u00f3n previa para esta vulnerabilidad es que el usuario debe haberse registrado en Okta Verify mientras el cliente de Okta usaba Okta Classic. Esto se aplica independientemente de si la organizaci\u00f3n se ha actualizado desde entonces a Okta Identity Engine."}], "lastModified": "2024-10-25T12:56:07.750", "sourceIdentifier": "psirt@okta.com"}