cve/2022/CVE-2022-1697.md

### [CVE-2022-1697](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1697)
![](https://img.shields.io/static/v1?label=Product&message=Okta%20Active%20Directory%20Agent&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Unquoted%20Search%20Path%20or%20Element&color=brighgreen)

### Description

Okta Active Directory Agent versions 3.8.0 through 3.11.0 installed the Okta AD Agent Update Service using an unquoted path. Note: To remediate this vulnerability, you must uninstall Okta Active Directory Agent and reinstall Okta Active Directory Agent 3.12.0 or greater per the documentation.

### POC

#### Reference
- https://help.okta.com/en-us/Content/Topics/Directory/ad-agent-update.htm

#### Github
No PoCs found on GitHub currently.