Rewterz Threat Advisory – CVE-2023-20207 – Cisco Duo Authentication Proxy Vulnerability

Severity

Medium

Analysis Summary

CVE-2023-20207

Cisco Duo Authentication Proxy could allow a remote authenticated attacker to obtain sensitive information, caused by a flaw in the logging component. By accessing the log files, a remote attacker could exploit this vulnerability to view sensitive information in clear text.

Impact

• Information Disclosure

Indicators Of Compromise

CVE

• CVE-2023-20207

Affected Vendors

Cisco

Affected Products

• Cisco Duo Authentication Proxy

Remediation

Refer to Cisco Security Advisory for patch, upgrade or suggested workaround information. 

Cisco Security Advisory