Skip to content
OpenAdvisories
Unscored CVE-2020-15077 EUVD-2020-7205GHSA-2fc6-fh8m-r4wf

OpenVPN Access Server 2.8.7 and earlier versions allows a remote attackers to bypass authentication and access control channel data on serv…

Published Jun 4, 2021 · Updated Aug 4, 2024 · Assigned by OpenVPN

Description

OpenVPN Access Server 2.8.7 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authentication, which can be used to potentially trigger further information leaks.

Affected products

VendorProductAffectedFixed
— OpenVPN Access Server 2.8.7 and earlier versions —

References