Cisco Duo Licensing Issue Vulnerability

Cisco Duo is a fully managed solution from Cisco, Inc. Providing secure access to your applications and data, Cisco Duo suffers from an authorization issue vulnerability that stems from a failure to properly match the designated user of a smart card with the authenticated user, which can be exploited by an unauthenticated attacker with physical access to bypass authentication and can use any Personal Identity Verification (PIV) smart card for authentication.