CVE-2024-20292

Summary

CVE-2024-20292 is a vulnerability affecting the logging component of Cisco Duo Authentication for Windows Logon and RDP. This issue permits authenticated, local attackers to access sensitive information in clear text on impacted systems. The root cause is the improper storage of an unencrypted registry key within certain logs. An adversary may take advantage of this vulnerability by gaining access to the logs on a vulnerable system, potentially leading to the exposure of confidential data.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.