Skip to content
OpenAdvisories
Unscored CVE-2022-3761 EUVD-2022-43115GHSA-64ff-hjjg-hwr8

OpenVPN Connect versions before 3.4.0.4506 (macOS) and OpenVPN Connect before 3.4.0.3100 (Windows) allows man-in-the-middle attackers to in…

Published Oct 17, 2023 · Updated Aug 3, 2024 · Assigned by OpenVPN

Vendor: OpenVPN Product: OpenVPN Connect

Description

OpenVPN Connect versions before 3.4.0.4506 (macOS) and OpenVPN Connect before 3.4.0.3100 (Windows) allows man-in-the-middle attackers to intercept configuration profile download requests which contains the users credentials

Affected products

VendorProductAffectedFixed
OpenVPN OpenVPN Connect until 3.4.0.4506 – < 3.4.0.4506, until 3.4.0.3100 – < 3.4.0.3100 3.4.0.4506

Advisories 1

References