Duo

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Duo records in CISA KEV

No Duo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Authentication Proxy 2 records LOW Duoconnect 1 record LOW

Records

3 records

TI-2021-01219 CVE-2021-1492 · GHSA-5hf3-34gj-8w5g

Duo Authentication Proxy Installer Denial of Service Vulnerability

LOW 31

The Duo Authentication Proxy installer prior to 5.2.1 did not properly validate file installation paths.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00279 Published 2021-03-25 Fixed in 5.2.1 CWE-64

TI-2023-06913 CVE-2023-20207 · GHSA-7qqv-fq8c-hp7g

Sensitive information in log files in Cisco Duo Authentication Proxy

LOW 29

A vulnerability in the logging component of Cisco Duo Authentication Proxy could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00476 Published 2023-07-12 No fix listed CWE-532

TI-2020-02990 CVE-2020-3442 · GHSA-83vc-pmxf-g524

DuoConnect SSH Connection Vulnerability

LOW 25

The DuoConnect client enables users to establish SSH connections to hosts protected by a DNG instance.

CVSS 3.1MEDIUM 5.7 Adjacent network No auth User interaction EPSS 0.00152 Published 2020-07-20 Fixed in 1.1.1 CWE-319

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0