A vulnerability in Cisco Duo Epic for Hyperdrive could allow an authenticated, local attacker to view sensitive information in cleartext on an affected system.
This vulnerability is due to improper storage of an unencrypted registry key. A low-privileged attacker could exploit this vulnerability by viewing or querying the registry key on the affected system. A successful exploit could allow the attacker to view sensitive information in cleartext.
References
| Link | Resource |
|---|---|
| https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-duo-epic-info-sdLv6h8y | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
13 Sep 2024, 19:24
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-311 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| First Time |
Cisco duo Authentication For Epic
Cisco |
|
| References | () https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-duo-epic-info-sdLv6h8y - Vendor Advisory | |
| CPE | cpe:2.3:a:cisco:duo_authentication_for_epic:1.0.1:*:*:*:*:*:*:* cpe:2.3:a:cisco:duo_authentication_for_epic:1.0.0:*:*:*:*:*:*:* cpe:2.3:a:cisco:duo_authentication_for_epic:1.1.13:*:*:*:*:*:*:* cpe:2.3:a:cisco:duo_authentication_for_epic:1.2.0.95:*:*:*:*:*:*:* cpe:2.3:a:cisco:duo_authentication_for_epic:1.1.9:*:*:*:*:*:*:* cpe:2.3:a:cisco:duo_authentication_for_epic:1.1.10:*:*:*:*:*:*:* |
04 Sep 2024, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-09-04 17:15
Updated : 2024-09-13 19:24
NVD link : CVE-2024-20503
Mitre link : CVE-2024-20503
JSON object : View
Products Affected
cisco
- duo_authentication_for_epic
CWE
CWE-311
Missing Encryption of Sensitive Data