CVE-2023-20229

The CVE-2023-20229 entry concerns Cisco Duo Device Health Application for Windows. The issue is in CryptoService where insufficient input validation permits authenticated, low-privilege, local attackers to perform directory traversal and overwrite arbitrary files with SYSTEM-level privileges, pot...