Okta Java Management SDK Race Condition Vulnerability in ApiClient Class

A race condition vulnerability has been identified in the Okta Java Management SDK, specifically in versions 11.0.0 prior to 20.0.0. This vulnerability arises from concurrent requests using the ApiClient class, which can lead to one request's response status code or headers improperly influencing another request's response. This issue is particularly concerning for multithreaded applications that rely on the ApiClient and use response status codes in access control decisions.

Impact

Exploitation of this vulnerability can lead to unintended interference between concurrent API requests, potentially allowing one request to manipulate the response of another. This could disrupt application logic, especially in access control scenarios.

Remediation

Users can upgrade to Okta Java Management SDK version 20.0.1 or later to address this vulnerability.