CVE-2020-15077

2021-06-0410:42:01

CWE-305

OpenVPN

www.cve.org

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.8%

JSON

OpenVPN Access Server 2.8.7 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authentication, which can be used to potentially trigger further information leaks.

CNA Affected

[
  {
    "product": "OpenVPN Access Server",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "2.8.7 and earlier versions"
      }
    ]
  }
]