Duo Security has fixed an issue that could have allowed an attacker with primary credentials of another user to bypass...
Duo has identified and fixed an issue with the Duo Network Gateway (DNG) product in which some customer-provided SSL...
Duo has identified and fixed an issue in the DuoConnect client that allows end-users to choose insecure configurations.
Duo Engineering has identified and fixed an issue with directory sync for on-premises Microsoft Microsoft Entra ID, OpenLDAP,...
Duo has identified and fixed an issue with Directory Sync where enrollment emails were sent to users regardless of whether the...
In 2019 a third-party software library, which Duo Access Gateway (DAG) used, contained a vulnerability; version 1.5.10 of DAG...
In 2019 a Duo customer identified an issue with Duo Authentication for Windows Logon where a system configured to fail securely...
Duo has identified and fixed an issue with the Duo Access Gateway (DAG). This issue could have allowed for data exposure on the...
Duo has identified and fixed an issue with our documentation for the Duo Authentication Proxy integration with VMware Horizon...
Duo has identified and fixed an issue with the Duo administrative panel. This issue could have allowed for a second-factor...
Duo has identified and fixed an issue with our public documentation on the Duo Unix integration. The suggested Pluggable...
In 2017 we identified a security flaw in a third-party library used in the Duo Network Gateway (DNG) that could have allowed...
In 2017 we identified an issue in duo_unix that, under certain uncommon configurations, could have enabled attackers to bypass...
Duo has identified and fixed an issue in our cloud service which, under certain configurations, could have enabled attackers...
In 2016, we identified 1 issue in Duo Authentication Proxy that, under uncommon configurations, could've enabled attackers to...
Check out 2016's identified issues in the Duo Authentication Proxy that could have enabled attackers to partially or fully...
Duo Security has identified an issue which, under certain configurations, could have enabled attackers to bypass second-factor...
Duo Security has identified an issue in recent versions of Duo Mobile for iOS that could allow attackers to perform a...
Duo Security has identified an issue in certain versions of the Duo Web SDK that could allow attackers to bypass primary and...
Duo Security has identified an issue in the iOS Duo Mobile app that may allow credentials to be backed up in an encrypted form...
Duo Security has identified an issue that may allow local users to bypass second factor authentication when using the pam_duo...
Duo Security has identified an issue in which it may be possible for users to perform certain actions without completing...
Duo Security has identified an issue in its Credential-Provider based Remote Desktop Protocol (RDP) integrations (e.g. those...
Duo Security has identified an issue in which it is possible to bypass second factor authentication of multisite WordPress...
Duo Security has identified an issue in which it is possible to bypass second factor authentication of Remote Desktop Protocol...
Duo Security has identified an issue in which it is possible to bypass second factor authentication of Remote Desktop Web...
Older versions of the Duo Security Outlook Web Access (OWA) integration may be vulnerable to a bypass of the second...