Critical Vulnerability for the PG Desktop Client v6.6.0.1

Owned by Christopher R. Perry
Sept 07, 2023
1 min read

Notification Date: 9/7/2023

Impacted Customers:

  • Using PG Desktop Client v6.6.0.1 AND
    Using DUO Push MFA or BIO-key MobileAuth for MFA

Description:

There is a critical vulnerability specific to the PG Desktop client v6.6.0.1.  This vulnerability allows users to bypass Multifactor Authentication when using either DUO Push or BIO-key MobileAuth as the secondary factor.

Remediation:

Impacted customers must contact PortalGuard Technical Support to schedule an upgrade of the PG Desktop client on all workstations to utilize v6.6.0.3.