← All advisories

High severity7.5NVD Advisory· Published Jul 6, 2022· Updated Jun 17, 2026

CVE-2022-33738

CVE-2022-33738

Description

OpenVPN Access Server before 2.11 uses a weak random generator used to create user session token for the web portal

Affected products

3

OpenVPN/Openvpn Access Server3 versions
cpe:2.3:a:openvpn:openvpn_access_server:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:openvpn:openvpn_access_server:*:*:*:*:*:*:*:*range: <2.11.0
- (no CPE)
- (no CPE)range: <2.11

Patches

Vulnerability mechanics

References

1

openvpn.net/vpn-server-resources/release-notes/nvdRelease NotesVendor Advisory

News mentions

0

No linked articles in our index yet.