Non notée
CVE-2022-33737 The OpenVPN Access Server installer creates a log file readable for everyone, which from version 2.10.0 and before…
Description
The OpenVPN Access Server installer creates a log file readable for everyone, which from version 2.10.0 and before 2.11.0 may contain a random generated admin password
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| OpenVPN Access Server | Versions non publiées |
Références
- openvpn.net openvpn.net
Chronologie
- Publiée
- Dernière modification
Autres CVE de OpenVPN Access Server
Les 7 CVE de OpenVPN Access Server →
CVE-2021-4234
OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a response to a reset…
Non notée
CVE-2022-33738
OpenVPN Access Server before 2.11 uses a weak random generator used to create user session token for the web portal
Non notée
CVE-2021-3824
OpenVPN Access Server 2.9.0 through 2.9.4 allow remote attackers to inject arbitrary web script or HTML via the web…
Non notée
CVE-2020-36382
OpenVPN Access Server 2.7.3 to 2.8.7 allows remote attackers to trigger an assert during the user authentication phase…
Non notée