This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2024-20503 | BDVDB-2026-247359 Detail

CiscoCisco Duo Authentication for Epic

Description#

A vulnerability in Cisco Duo Epic for Hyperdrive could allow an authenticated, local attacker to view sensitive information in cleartext on an affected system. This vulnerability is due to improper storage of an unencrypted registry key. A low-privileged attacker could exploit this vulnerability by viewing or querying the registry key on the affected system. A successful exploit could allow the attacker to view sensitive information in cleartext.

Impact#

Per CVSS v3.1: confidentiality impact high, integrity impact none, availability impact none. Attack vector: local.

Weaknesses#

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.