Okta Hyperdrive Integration Plugin

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:okta:okta_hyperdrive_integration_plugin:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOkta (23e081ab-902b-5fcb-b218-10b72ec8f1f4)
ProductOkta Hyperdrive Integration Plugin (7eb5425b-eb00-5fd7-93fd-00bfcd6f71a7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-78574 vulnerable 2026-09-16 04:33:44.616264 Improper Assembly Resolution in Okta Hyperdrive Integration Plugin Registry Handling
HIGH (7.5)
The Okta Hyperdrive Integration plugin resolves a required assembly using a registry path within the current user's hive without integrity verification. The referenced path is loaded via Assembly.LoadFrom without signature validation, resulting in an unverified assembly executing within the context of the host process or elevated installer.
Published: 2026-09-08T20:11:43.869Z
Updated: 2026-09-10T14:36:50.101Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-78627 vulnerable 2026-09-16 04:33:44.612578 Improper Credential Protection in Okta Hyperdrive Integration Installer Logging
HIGH (7.3)
The Okta Hyperdrive Integration installer does not mask the OAuth client secret when passed as an MSI property. The credential is recorded in plaintext in the installer log, the Application Event Log, and the process command line, all of which are readable by an authenticated local user on the workstation.
Published: 2026-09-08T20:12:16.468Z
Updated: 2026-09-10T14:37:14.625Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.