CVE-2022-20662

Cisco Duo for macOS contains an authentication bypass in smart card login. The issue arises because the assigned user of a PIV smart card is not correctly bound to the authenticating user, allowing an unauthenticated, physically proximate attacker to configure a smart card login to bypass Duo aut...