CVE-2022-33738 OpenVPN Access Server before 2.11 uses a weak random generator used to create user session token for the web portal

Description

OpenVPN Access Server before 2.11 uses a weak random generator used to create user session token for the web portal

Produits et versions touchés

Produit	Versions touchées	Corrigé en
OpenVPN Access Server	Versions non publiées

Autres CVE de OpenVPN Access Server

Les 7 CVE de OpenVPN Access Server →

CVE-2021-4234 OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a response to a reset… Non notée CVE-2022-33737 The OpenVPN Access Server installer creates a log file readable for everyone, which from version 2.10.0 and before… Non notée CVE-2021-3824 OpenVPN Access Server 2.9.0 through 2.9.4 allow remote attackers to inject arbitrary web script or HTML via the web… Non notée CVE-2020-36382 OpenVPN Access Server 2.7.3 to 2.8.7 allows remote attackers to trigger an assert during the user authentication phase… Non notée