Description
The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local authenticated users to bypass the trusted configuration directory constraint via incorrect file path validation
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenVPN | OpenVPN | 2.4.0 – ≤ 2.6.22 | — |