XXE in Sysaid Okta Sso
CVE-2022-23170
SysAid - Okta SSO integration - was found vulnerable to XML External Entity Injection vulnerability. Any SysAid environment that uses the Okta SSO integration might be vulnerable. An unauthenticated attacker could exploit the XXE vulnerability by sending a malformed POST request to the identity provider endpoint. An attacker can extract the identity provider endpoint by decoding the SAMLRequest parameter's value and searching for the AssertionConsumerServiceURL parameter's value. It often allows an attacker to view files on the application server filesystem and interact with any back-end or external systems that the application can access. In some situations, an attacker can escalate an XXE attack to compromise the underlying server or other back-end infrastructure by leveraging the XXE vulnerability to perform server-side request forgery (SSRF) attacks.
Vulnerability class: XXE (XML External Entity)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L.
EPSS exploit prediction
EPSS: 0.006 (48.8th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 49th percentile — 48.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.006 · newest: 0.006 · change: +0.000
Affected products
- Sysaid Okta Sso
- Sysaid - Okta Sso Integration — versions 22.1.63
Weakness classification (CWE)
References
- www.gov.il/en/departments/faq/cve_advisories (Third Party Advisory)
Frequently asked questions
- What is CVE-2022-23170?
- CVE-2022-23170 is a medium-severity vulnerability in Sysaid Okta Sso, classified under Improper Restriction of XML External Entity Reference (XXE). CVSS score: 5.9/10. Published 2022-06-24.
- How severe is CVE-2022-23170?
- Medium severity. CVSS v3 base score is 5.9 out of 10.