AndrewP.29619 (Customer) asked a question.
Is it possible to see our user's application version?
Hello everyone,
My team and I were investigating the recent vulnerability announced here: https://trust.okta.com/security-advisories/okta-verify-for-ios-cve-2024-10327/
We wanted to know, is it possible to pull the user's application version to see who may be affected by this among our users?
I did find information referring back to an option for Android from awhile back (https://support.okta.com/help/s/article/How-to-generate-a-report-for-Okta-Verify-App-Version-412-and-below-for-Android-OS-Versions?language=en_US) but this doesn't seem to be working as expected for our purposes.
Any ideas or assistance would be greatly appreciated.
Hello @AndrewP.29619 (Customer) , thank you for contacting Okta Community.
Yes, it is possible. I've taken your question to some of our colleagues who specialize in reporting and management functions. You can use this query in System logs:
eventType eq "user.authentication.auth_via_mfa" and client.device eq "Mobile" and client.userAgent.os eq "iOS" and client.userAgent.rawUserAgent co "OktaDeviceSDK"
If you are looking for one user in particular:
eventType eq "user.authentication.auth_via_mfa" and client.device eq "Mobile" and client.userAgent.os eq "iOS" and actor.id eq "pasteheretheuserid"
Paste the user id. Under RawUserAgent - 9.x.x Okta Device SDK is the OV version.
If you are trying to generate a list for multiple users:
eventType eq "user.authentication.auth_via_mfa" and client.device eq "Mobile" and client.userAgent.os eq "iOS"
Regards.
--
Ask Us Anything about Workflows now thru 10/31