Skip to content
Sign in
Not rated

CVE-2020-15078 OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on…

Description

OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authentication, which can be used to potentially trigger further information leaks.

Affected products and versions

Product Affected versions Fixed in
OpenVPN Versions not published

Other CVEs of OpenVPN

The 2 CVEs of OpenVPN →
CVE-2022-0547 OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than… 9.8 Critical
Track this CVE