SecuriTricks - CVE-2025-7371

Description

Okta On-Premises Provisioning (OPP) agents log certain user data during administrator-initiated password resets. This vulnerability allows an attacker with access to the local servers running OPP agents to retrieve user personal information and temporary passwords created during password reset. You are affected by this vulnerability if the following preconditions are met: Local server running OPP agent with versions >=2.2.1 and <= 2.3.0, and User account has had an administrator-initiated password reset while using the affected versions.

Product(s) Impacted

Vendor	Product	Versions
Okta	On-premises Provisioning	2.2.1-2.3.0

Weaknesses

Common security weaknesses mapped to this vulnerability.

CWE-532

Insertion of Sensitive Information into Log File

Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.

*CPE(s)

Affected systems and software identified for this CVE.

Type	Vendor	Product	Version	Update	Edition	Language	Software Edition	Target Software	Target Hardware	Other Information
a	okta	on-premises_provisioning	2.2.1-2.3.0	/	/	/	/	/	/	/

References

https://help.okta.com/oie/en-us/content/topics/settings/version_histories/ver_history_opp_agent.htm

CVSS Score

6.8 / 10

CVSS Data - 3.1

Attack Vector: NETWORK
Attack Complexity: LOW
Privileges Required: HIGH
Scope: CHANGED
Confidentiality Impact: HIGH
Integrity Impact: NONE
Availability Impact: NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

View Vector String

Timeline

Published: July 22, 2025, 4:15 p.m.
Last Modified: July 22, 2025, 4:15 p.m.

Status : Received

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

psirt@okta.com

CVE-2025-7371