GHSA-63pc-vhwj-p2qmMediumCVSS 6.0
The Okta Verify for Windows uninstaller does not verify whether the user data directory is a...
🔗 CVE IDs covered (1)
📋 Description
The Okta Verify for Windows uninstaller does not verify whether the user data directory is a filesystem junction before deleting its contents with elevated privileges. The delete operation follows the junction target, resulting in recursive deletion of unintended directory contents.