CVE-2023-20123

Cisco Duo for macOS and Duo Authentication for Windows Logon offline Credential replay vulnerability (CVE-2023-20123) allows an unauthenticated, physical attacker to replay previously used MFA codes because session credentials do not expire properly. Affected products include Cisco Duo on macOS a...

CVE-2022-20662

Cisco Duo for macOS contains an authentication bypass in smart card login. The issue arises because the assigned user of a PIV smart card is not correctly bound to the authenticating user, allowing an unauthenticated, physically proximate attacker to configure a smart card login to bypass Duo aut...