Unrated severityNVD Advisory· Published Jul 14, 2020· Updated Aug 4, 2024

CVE-2020-15074

Description

OpenVPN Access Server older than version 2.8.4 and version 2.9.5 generates new user authentication tokens instead of reusing exiting tokens on reconnect making it possible to circumvent the initial token expiry timestamp.

Affected products

OpenVPN/Access Serverdescription
OpenVPN/Openvpn Access Serverllm-fuzzy
Range: <2.8.4, <2.9.5

Patches

Vulnerability mechanics

References

openvpn.net/vpn-server-resources/release-notes/mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000