Okta Position Regarding MOVEit Vulnerability - CVE-2023-34362
Sep 9, 2024
Single Sign-On
Okta Classic Engine
Okta Identity Engine
Overview
This article provides details on Okta's positioning regarding the recently found MOVEit vulnerability, CVE-2023-34362.
Applies To
- Customers using the MOVEit platform
- Customer Solutions
- Okta Classic Engine
- Okta Identity Engine (OIE)
- Vulnerability
Cause
There was a discovery of a vulnerability affecting MOVEit platform, found around 27th May 2023, and customers have inquired if Okta is affected by that vulnerability.
Solution
The following has been confirmed by the Okta Security Team:
- Okta is not impacted by CVE-2023-34362. The affected MOVEit version is not used anywhere in production (or internal) services.
