Lucene search
FreeBSD45A72180-A640-11EC-A08B-85298243E224HistoryMar 10, 2022 - 12:00 a.m.
openvpn -- Potential authentication by-pass with multiple deferred authentication plug-ins
2022-03-1000:00:00
vuxml.freebsd.org
14
0.005 Low
EPSS
Percentile
76.4%
David Sommerseth reports:
OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of deferred authentication replies, which allows an external user to be granted access with only partially correct credentials. This issue is resolved in OpenVPN 2.4.12 and v2.5.6.
Related
suse
suse
Security update for openvpn (important)
2022-03-29 00:00:00
Security update for openvpn (moderate)
2022-06-03 00:00:00
redos
redos
ROS-20220329-03
2022-03-29 00:00:00
veracode
veracode
Access-Control Bypass
2022-03-26 07:55:18
openvas
openvas
Fedora: Security Advisory for openvpn (FEDORA-2022-a9bd17092d)
2022-03-23 00:00:00
Fedora: Security Advisory for openvpn (FEDORA-2022-cb4c1146dc)
2022-03-27 00:00:00
openSUSE: Security Advisory for openvpn (openSUSE-SU-2022:1029-1)
2022-03-30 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: openvpn-2.5.6-1.fc34
2022-03-24 14:53:13
[SECURITY] Fedora 36 Update: openvpn-2.5.6-1.fc36
2022-03-26 15:53:41
[SECURITY] Fedora 35 Update: openvpn-2.5.6-1.fc35
2022-03-17 15:49:05
nessus
nessus
Amazon Linux AMI : openvpn (ALAS-2023-1719)
2023-04-06 00:00:00
FreeBSD : openvpn -- Potential authentication by-pass with multiple deferred authentication plug-ins (45a72180-a640-11ec-a08b-85298243e224)
2022-03-17 00:00:00
SUSE SLES11 Security Update : openvpn-openssl1 (SUSE-SU-2022:14937-1)
2022-04-07 00:00:00
osv
osv
CVE-2022-0547
2022-03-18 18:15:12
openvpn vulnerability
2022-03-24 12:13:58
openvpn - security update
2022-05-03 00:00:00
debiancve
debiancve
CVE-2022-0547
2022-03-18 18:15:00
mageia
mageia
Updated openvpn packages fix security vulnerability
2022-03-30 20:06:56
cloudlinux
cloudlinux
Fix of CVE: CVE-2022-0547
2022-04-05 15:03:38
cve
cve
CVE-2022-0547
2022-03-18 18:15:00
ubuntu
ubuntu
OpenVPN vulnerability
2022-03-24 00:00:00
alpinelinux
alpinelinux
CVE-2022-0547
2022-03-18 18:15:00
prion
prion
Authentication flaw
2022-03-18 18:15:00
cvelist
cvelist
CVE-2022-0547
2022-03-18 18:00:20
amazon
amazon
Low: openvpn
2023-03-30 22:50:00
altlinux
altlinux
Security fix for the ALT Linux 9 package openvpn version 2.5.6-alt1
2022-09-28 00:00:00
Security fix for the ALT Linux 10 package openvpn version 2.5.6-alt1
2022-05-24 00:00:00
ubuntucve
ubuntucve
CVE-2022-0547
2022-03-18 00:00:00
debian
debian
[SECURITY] [DLA 2992-1] openvpn security update
2022-05-03 12:18:30
ibm
ibm
ics
ics
​Siemens SINAMICS Medium Voltage Products
2023-06-15 12:00:00
Siemens SCALANCE, RUGGEDCOM Third-Party
2023-03-16 12:00:00