CPE Details
OpenVPN Access Server 2.7.4
2.7.4
2020-05-12
12h21 +00:00
12h21 +00:00
2020-05-12
12h21 +00:00
12h21 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:openvpn:openvpn_access_server:2.7.4:*:*:*:*:*:*:*
Informations
Vendor
openvpnProduct
openvpn_access_serverVersion
2.7.4Related CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a response to a reset packet sent from the client which the client again does not respond to, resulting in a limited amplification attack. | 7.5 |
Haute |
||
| OpenVPN Access Server before 2.11 uses a weak random generator used to create user session token for the web portal | 7.5 |
Haute |
||
| OpenVPN Access Server 2.7.3 to 2.8.7 allows remote attackers to trigger an assert during the user authentication phase via incorrect authentication token data in an early phase of the user authentication resulting in a denial of service. | 7.5 |
Haute |
||
| OpenVPN Access Server 2.8.7 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authentication, which can be used to potentially trigger further information leaks. | 5.3 |
Moyen |
||
| OpenVPN Access Server older than version 2.8.4 and version 2.9.5 generates new user authentication tokens instead of reusing exiting tokens on reconnect making it possible to circumvent the initial token expiry timestamp. | 7.5 |
Haute |
