PT-2023-22889
CVE-2023-30690
·
Published
2023-10-03
·
Updated
2023-10-11
Description by
CVSS 3.1
8.5
HighMetricsAV:L/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L
Name of the Vulnerable Software and Affected Versions
Duo versions prior to SMR Oct-2023 Release 1
Description
The issue is related to improper input validation, allowing local attackers to launch privileged activities. This can be exploited by local attackers.
Recommendations
For versions prior to SMR Oct-2023 Release 1, update to the SMR Oct-2023 Release 1 or later to resolve the issue. As a temporary workaround, consider restricting local access to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾