A vulnerability in the logging component of Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, local attacker to view sensitive information in clear text on an affected system.
This vulnerability is due to improper storage of an unencrypted registry key in certain logs. An attacker could exploit this vulnerability by accessing the logs on an affected system. A successful exploit could allow the attacker to view sensitive information in clear text.
References
Configurations
History
24 Mar 2025, 13:56
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-duo-infodisc-rLCEqm6T - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| First Time |
Cisco duo Authentication For Windows Logon And Rdp
Cisco |
|
| CWE | CWE-312 | |
| CPE | cpe:2.3:a:cisco:duo_authentication_for_windows_logon_and_rdp:*:*:*:*:*:*:*:* |
06 Mar 2024, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-03-06 17:15
Updated : 2025-03-24 13:56
NVD link : CVE-2024-20292
Mitre link : CVE-2024-20292
JSON object : View
Products Affected
cisco
- duo_authentication_for_windows_logon_and_rdp
CWE
CWE-312
Cleartext Storage of Sensitive Information