Duo Authentication for Windows Logon and RDP version 4.3.0 released

[kyleleighavery]

Duo Authentication for Windows Logon and RDP version 4.3.0 released 

• Accessibility improvements.
• Design improvements and minor bug fixes in installer.
• Corrects an issue which caused occasional black or frozen screens during Duo login.
• Adds an optional registry setting ParseUsernameAndDomain which overrides Duo user/domain determination logic by parsing the username provided by the user. Refer to Why might an incorrect username get sent to Duo from a machine joined to Entra ID? for more information.
• Addresses a security vulnerability in which trusted sessions persisted after a reboot (CVE-2024-20301; Cisco Security Advisory).
• Addresses a security vulnerability where the Duo secret key value was logged in plain-text during an application upgrade (CVE-2024-20292; Cisco Security Advisory).
  • We recommend you migrate to a new instance of the application to preserve the integrity of the application credentials on your client systems. Refer to Duo KB Article 8760 for step-by-step instructions and to Duo KB article What are Duo application credentials and how should I protect them? for more information.
    
    
• Corrects an issue where the installer did not secure the Duo registry key so integration credentials could be read by unprivileged users until the registry key was secured by first launch of the application.