Skip to content
fr Sign in
4.4 Medium

CVE-2024-20292 A vulnerability in the logging component of Cisco Duo Authentication for Windows Logon and RDP could allow an…

Description

A vulnerability in the logging component of Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, local attacker to view sensitive information in clear text on an affected system. This vulnerability is due to improper storage of an unencrypted registry key in certain logs. An attacker could exploit this vulnerability by accessing the logs on an affected system. A successful exploit could allow the attacker to view sensitive information in clear text.

Affected products and versions

Product Affected versions Fixed in
Cisco Duo 2.0.0 No fix stated
Cisco Duo 1.1 1.1.0 → 1.1.1 No fix stated
Cisco Duo 1.0 1.0.1 → 1.0.4 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Duo

The 6 CVEs of Cisco Duo →
CVE-2025-20258 A vulnerability in the self-service portal of Cisco Duo could allow an unauthenticated, remote attacker to inject… 5.4 Medium CVE-2024-20301 A vulnerability in Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, physical attacker to… 6.2 Medium CVE-2023-20199 A vulnerability in Cisco Duo Two-Factor Authentication for macOS could allow an authenticated, physical attacker to… 6.2 Medium CVE-2023-20123 A vulnerability in the offline access mode of Cisco Duo Two-Factor Authentication for macOS and Duo Authentication for… 6.3 Medium
Track this CVE