Lucene search

openvpn -- Potential authentication by-pass with multiple deferred authentication plug-ins

🗓️ 10 Mar 2022 00:00:00Reported by FreeBSDType

OpenVPN potential authentication bypass with multiple deferred authentication plug-in

Reporter	Title	Published	Views	Family All 59
Veracode	Access-Control Bypass	26 Mar 202207:55	–	veracode
Tenable Nessus	Ubuntu 14.04 LTS / 16.04 LTS : OpenVPN vulnerability (USN-6850-1)	26 Jun 202400:00	–	nessus
Tenable Nessus	Amazon Linux AMI : openvpn (ALAS-2023-1719)	6 Apr 202300:00	–	nessus
Tenable Nessus	FreeBSD : openvpn -- Potential authentication by-pass with multiple deferred authentication plug-ins (45a72180-a640-11ec-a08b-85298243e224)	17 Mar 202200:00	–	nessus
Tenable Nessus	openSUSE 15 Security Update : openvpn (openSUSE-SU-2022:1029-1)	30 Mar 202200:00	–	nessus
Tenable Nessus	SUSE SLES11 Security Update : openvpn-openssl1 (SUSE-SU-2022:14937-1)	7 Apr 202200:00	–	nessus
Tenable Nessus	SUSE SLED15 / SLES15 Security Update : openvpn (SUSE-SU-2022:1029-1)	30 Mar 202200:00	–	nessus
Tenable Nessus	SUSE SLES12 Security Update : openvpn (SUSE-SU-2022:1024-1)	30 Mar 202200:00	–	nessus
Tenable Nessus	Fedora 35 : openvpn (2022-a9bd17092d)	17 Mar 202200:00	–	nessus
Tenable Nessus	SUSE SLED15 / SLES15 Security Update : openvpn (SUSE-SU-2022:1934-1)	4 Jun 202200:00	–	nessus

Vulners

Node

openvpn openvpnRange<2.5.6

Source	Link
github	www.github.com/OpenVPN/openvpn/blob/release/2.5/Changes.rst
community	www.community.openvpn.net/openvpn/wiki/CVE-2022-0547

OS	OS Version	Architecture	Package	Package Version	Filename
FreeBSD	any	noarch	openvpn	2.5.6	UNKNOWN
FreeBSD	any	noarch	openvpn-mbedtls	2.5.6	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

10 Mar 2022 00:00Current

4.1Medium risk

Vulners AI Score4.1

CVSS27.5

CVSS39.8

EPSS0.0065