Okta Classic Customers Told to Check Logs for Sign-on Bypass

Okta warns that exploitation of this flaw could have occurred if organizations had weak or misconfigured policies in place. The exploitation required valid credentials, application-specific sign-on policies, and the use of an "unknown" user-agent.