Not rated
CVE-2022-33737 The OpenVPN Access Server installer creates a log file readable for everyone, which from version 2.10.0 and before…
Description
The OpenVPN Access Server installer creates a log file readable for everyone, which from version 2.10.0 and before 2.11.0 may contain a random generated admin password
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| OpenVPN Access Server | Versions not published |
References
- openvpn.net openvpn.net
Timeline
- Published
- Last modified
Other CVEs of OpenVPN Access Server
The 7 CVEs of OpenVPN Access Server →
CVE-2021-4234
OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a response to a reset…
Not rated
CVE-2022-33738
OpenVPN Access Server before 2.11 uses a weak random generator used to create user session token for the web portal
Not rated
CVE-2021-3824
OpenVPN Access Server 2.9.0 through 2.9.4 allow remote attackers to inject arbitrary web script or HTML via the web…
Not rated
CVE-2020-36382
OpenVPN Access Server 2.7.3 to 2.8.7 allows remote attackers to trigger an assert during the user authentication phase…
Not rated