CVE-2022-1697

Okta Active Directory Agent versions 3.8.0 through 3.11.0 installed the Okta AD Agent Update Service using an unquoted path. Note: To remediate this vulnerability, you must uninstall Okta Active Directory Agent and reinstall Okta Active Directory Agent 3.12.0 or greater per the documentation.

• CWE-428

• https://help.okta.com/en-us/Content/Topics/Directory/ad-agent-update.htmVendor Advisory
• https://support.okta.com/help/s/article/Security-Notice-CVE-2022-1697-FAQMitigation, Vendor Advisory
• https://trust.okta.com/security-advisories/okta-active-directory-agent-cve-2022-1697Vendor Advisory
• https://help.okta.com/en-us/Content/Topics/Directory/ad-agent-update.htmVendor Advisory
• https://support.okta.com/help/s/article/Security-Notice-CVE-2022-1697-FAQMitigation, Vendor Advisory
• https://trust.okta.com/security-advisories/okta-active-directory-agent-cve-2022-1697Vendor Advisory

Published

Sep 6, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-1689The Note Press WordPress plugin through 0.1.10 does not sani…2.7
• CVE-2022-1690The Note Press WordPress plugin through 0.1.10 does not sani…2.7
• CVE-2022-1691The Realty Workstation WordPress plugin before 1.0.15 does n…4.9
• CVE-2022-1692The CP Image Store with Slideshow WordPress plugin before 1.…9.8
• CVE-2022-1694The Useful Banner Manager WordPress plugin through 1.6.1 doe…6.5
• CVE-2022-1695The WP Simple Adsense Insertion WordPress plugin before 2.1 …4.3
• CVE-2022-1698Allowing long password leads to denial of service in GitHub …7.5
• CVE-2022-1699Uncontrolled Resource Consumption in GitHub repository cause…7.5
• CVE-2022-1700Improper Restriction of XML External Entity Reference ('XXE'…9.8
• CVE-2022-1701SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and e…7.5
• CVE-2022-1702SonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and e…6.1
• CVE-2022-1703Improper neutralization of special elements in the SonicWall…8.8