Skip to content
Sign in
9.8 Critical

CVE-2022-0547 OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than…

Description

OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of deferred authentication replies, which allows an external user to be granted access with only partially correct credentials.

Affected products and versions

Product Affected versions Fixed in
OpenVPN Versions not published

Other CVEs of OpenVPN

The 2 CVEs of OpenVPN →
CVE-2020-15078 OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on… Not rated
Track this CVE