[MattPalmer1086]

Apparently customers upload HTTP archive files to the support system which can include session tokens for their actual systems.

So it allows attackers to compromise Okta's customers core infrastructure.