CVE-2023-20207 Information disclosure in Cisco Duo Authentication Proxy
An authenticated attacker can view sensitive credentials in clear text within logs of Cisco Duo Authentication Proxy.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-20207?
CVE-2023-20207 is a medium-severity vulnerability in Cisco Duo Authentication Proxy, published on 12 Jul 2023. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
A vulnerability in the logging component of Cisco Duo Authentication Proxy could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. This vulnerability exists because certain unencrypted credentials are stored. An attacker could exploit this vulnerability by accessing the logs on an affected system and obtaining credentials that they may not normally have access to. A successful exploit could allow the attacker to view sensitive information in clear text.
Which versions are affected by CVE-2023-20207?
It affects 1 product.
Products include Duo Authentication Proxy.
How do I fix CVE-2023-20207?
No fix has been published for CVE-2023-20207 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-20207 being exploited?
There is no known exploitation of CVE-2023-20207 in the wild and no public exploit code.
Other vulnerabilities in Cisco Duo Authentication Proxy
Sources
Also known as GHSA-7qqv-fq8c-hp7g.