Non notée
CVE-2020-15074 OpenVPN Access Server older than version 2.8.4 and version 2.9.5 generates new user authentication tokens instead of…
Description
OpenVPN Access Server older than version 2.8.4 and version 2.9.5 generates new user authentication tokens instead of reusing exiting tokens on reconnect making it possible to circumvent the initial token expiry timestamp.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| OpenVPN Access Server | Versions non publiées |
Références
- openvpn.net openvpn.net
Chronologie
- Publiée
- Dernière modification
Autres CVE de OpenVPN Access Server
Les 7 CVE de OpenVPN Access Server →
CVE-2021-4234
OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a response to a reset…
Non notée
CVE-2022-33738
OpenVPN Access Server before 2.11 uses a weak random generator used to create user session token for the web portal
Non notée
CVE-2022-33737
The OpenVPN Access Server installer creates a log file readable for everyone, which from version 2.10.0 and before…
Non notée
CVE-2021-3824
OpenVPN Access Server 2.9.0 through 2.9.4 allow remote attackers to inject arbitrary web script or HTML via the web…
Non notée