Lucene search
+L

672 matches found

CNVD
CNVD
added 2024/03/12 12:0 a.m.12 views

Cisco Duo Authentication Bypass Vulnerability

Cisco Duo is a fully managed solution from Cisco, Inc. Provides secure access to your applications and data. An authentication bypass vulnerability exists in Cisco Duo that stems from the inability to disable locally created trusted sessions after an affected device reboots, which can be exploite...

6.2CVSS6.9AI score0.00266EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/03/12 12:0 a.m.10 views

The vulnerability of the cloud platform for protecting applications from unauthorized users and Cisco Duo devices for Windows, related to authentication procedures that allow a intruder to gain access to the vulnerable device.

The vulnerability of the cloud platform for protecting applications from unauthorized users and Cisco Duo devices for Windows is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a hacker to gain access to the vulnerable device...

6.5CVSS6.4AI score0.00266EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2024/03/06 5:15 p.m.6 views

CVE-2024-20301

A vulnerability in Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, physical attacker to bypass secondary authentication and access an affected Windows device. This vulnerability is due to a failure to invalidate locally created trusted sessions after a reboot of t...

6.2CVSS5.8AI score0.00266EPSS
SaveExploits0References1
NVD
NVD
added 2024/03/06 5:15 p.m.24 views

CVE-2024-20301

A vulnerability in Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, physical attacker to bypass secondary authentication and access an affected Windows device. This vulnerability is due to a failure to invalidate locally created trusted sessions after a reboot of t...

6.2CVSS6.3AI score0.00266EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/06 5:15 p.m.5 views

CVE-2024-20292

A vulnerability in the logging component of Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, local attacker to view sensitive information in clear text on an affected system. This vulnerability is due to improper storage of an unencrypted registry key in certain...

5.5CVSS5.8AI score0.00109EPSS
SaveExploits0References1
Prion
Prion
added 2024/03/06 5:15 p.m.38 views

Authentication flaw

A vulnerability in Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, physical attacker to bypass secondary authentication and access an affected Windows device. This vulnerability is due to a failure to invalidate locally created trusted sessions after a reboot of t...

4CVSS7.1AI score0.00266EPSS
SaveExploits0References1
Prion
Prion
added 2024/03/06 5:15 p.m.22 views

Input validation

A vulnerability in the logging component of Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, local attacker to view sensitive information in clear text on an affected system. This vulnerability is due to improper storage of an unencrypted registry key in certain...

1.4CVSS6.4AI score0.00109EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/06 4:32 p.m.15 views

CVE-2024-20292

A vulnerability in the logging component of Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, local attacker to view sensitive information in clear text on an affected system. This vulnerability is due to improper storage of an unencrypted registry key in certain...

4.4CVSS6.2AI score0.00109EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/06 4:32 p.m.29 views

CVE-2024-20292

A vulnerability in the logging component of Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, local attacker to view sensitive information in clear text on an affected system. This vulnerability is due to improper storage of an unencrypted registry key in certain...

4.4CVSS4.8AI score0.00109EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/06 4:32 p.m.88 views

CVE-2024-20292

Cisco Duo Authentication for Windows Logon and RDP contains a local, authenticated-information disclosure vulnerability in its logging component. The issue stems from improper storage of an unencrypted registry key in logs, allowing a local attacker to read sensitive data in clear text on the aff...

5.5CVSS4.5AI score0.00109EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2024/03/06 4:28 p.m.82 views

CVE-2024-20301

Cisco Duo Authentication for Windows Logon and RDP is affected by an authentication bypass vulnerability. The issue stems from failure to invalidate locally created trusted sessions after reboot, allowing an authenticated, physical attacker to bypass secondary authentication and access the Window...

6.2CVSS6.3AI score0.00266EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/03/06 4:28 p.m.28 views

CVE-2024-20301

A vulnerability in Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, physical attacker to bypass secondary authentication and access an affected Windows device. This vulnerability is due to a failure to invalidate locally created trusted sessions after a reboot of t...

6.2CVSS6.5AI score0.00266EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/06 4:28 p.m.22 views

CVE-2024-20301

A vulnerability in Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, physical attacker to bypass secondary authentication and access an affected Windows device. This vulnerability is due to a failure to invalidate locally created trusted sessions after a reboot of t...

6.2CVSS6.9AI score0.00266EPSS
SaveExploits0References1
Cisco
Cisco
added 2024/03/06 4:0 p.m.50 views

Cisco Duo Authentication for Windows Logon and RDP Information Disclosure Vulnerability

A vulnerability in the logging component of Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, local attacker to view sensitive information in clear text on an affected system. This vulnerability is due to improper storage of an unencrypted registry key in certain...

4.4CVSS4.7AI score0.00109EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/03/06 12:0 a.m.9 views

Cisco Duo 安全漏洞

Cisco Duo is a fully managed solution from Cisco, Inc. Provides secure access to your applications and data. An authentication bypass vulnerability exists in Cisco Duo that stems from the inability to disable locally created trusted sessions after an affected device reboots, which can be exploite...

6.2CVSS6.9AI score0.00266EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/03/06 12:0 a.m.9 views

Cisco Duo Security Vulnerability

Cisco Duo is a fully managed solution from Cisco, Inc. providing secure access to your applications and data. A security vulnerability exists in Cisco Duo that stems from a flaw in the logging component that could allow an authenticated, local attacker to view sensitive information in plaintext o...

5.5CVSS6.1AI score0.00109EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/02/19 12:0 a.m.31 views

The vulnerabilities of the operating systems of network storage devices My Cloud OS, cloud storage services My Cloud Home, and My Cloud Home Duo, as well as SanDisk iBI, are related to uncontrolled resource consumption. This allows attackers to cause service interruptions.

The vulnerabilities of the My Cloud OS, My Cloud Home, and My Cloud Home Duo network storage systems, as well as the SanDisk iBI device, are related to uncontrolled resource consumption. Exploiting these vulnerabilities can allow an attacker to cause service interruptions...

6.1CVSS5.8AI score0.00822EPSS
SaveExploits0References3Affected Software13
BDU FSTEC
BDU FSTEC
added 2024/02/19 12:0 a.m.15 views

The vulnerabilities of the My Cloud OS, cloud storage services My Cloud Home and My Cloud Home Duo, as well as SanDisk iBI, are related to insufficiently checked incoming requests. This allows attackers to perform SSRF attacks.

The vulnerabilities of the My Cloud OS for network storage devices, as well as the My Cloud Home and My Cloud Home Duo cloud storage services, and the SanDisk iBeacon device, are related to insufficiently checked incoming requests. Exploiting these vulnerabilities can allow attackers to execute...

5.5CVSS6.3AI score0.00241EPSS
SaveExploits0References3Affected Software13
HackRead
HackRead
added 2024/02/13 8:33 p.m.12 views

Duo Jailed for Hacking JFK Taxi Dispatch System

By Waqas The scheme started in September 2019 and continued until September 2021. This is a post from HackRead.com Read the original post: Duo Jailed for Hacking JFK Taxi Dispatch System...

7.3AI score
SaveExploits0
CVE
CVE
added 2024/02/05 9:26 p.m.50 views

CVE-2023-22819

CVE-2023-22819 describes an uncontrolled resource consumption (memory exhaustion) vulnerability in Western Digital My Cloud Home, My Cloud Home Duo, SanDisk ibi, and Western Digital My Cloud OS 5 devices. The issue allows crafted requests to a service over the network, potentially stopping the se...

4.9CVSS5.1AI score0.00822EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder