Cisco Duo Authentication Proxy Information Disclosure Vulnerability

A vulnerability exists in the debug logging function of Cisco Duo Authentication Proxy, allowing authenticated, high-privileged, remote attackers to access sensitive information in system log files. This issue arises from inadequate masking of sensitive data before it is logged. Exploitation of this vulnerability could enable attackers to view restricted information.

Impact

Successful exploitation allows access to sensitive information that should be restricted, potentially leading to unauthorized actions or privileges.

Remediation

Cisco has released software updates to address this vulnerability. Customers should upgrade to version 6.5.2 if they are using Cisco Duo Authentication Proxy version 6.5.1 or earlier. For those on version 5.8.2 or earlier, migrating to a fixed release is recommended. After upgrading, it is advised to delete log files from the system where Cisco Duo Authentication Proxy is installed and from any other systems where logs may be stored.