Lucene search
+L

3195 matches found

NVD
NVD
•added 2021/04/26 2:15 p.m.•27 views

CVE-2020-15078

OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authentication, which can be used to potentially trigger further information leaks...

7.5CVSS0.04948EPSS
SaveExploits0References8
osv_alpine
osv_alpine
•added 2021/04/26 2:15 p.m.•9 views

ALPINE-CVE-2020-15078

OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authentication, which can be used to potentially trigger further information leaks...

7.5CVSS6.9AI score0.04948EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/04/26 2:15 p.m.•15 views

CVE-2020-15078

OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authentication, which can be used to potentially trigger further information leaks...

7.5CVSS7.1AI score0.04948EPSS
SaveExploits0References12
osv_ubuntu
osv_ubuntu
•added 2021/04/26 2:15 p.m.•21 views

UBUNTU-CVE-2020-15078

OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authentication, which can be used to potentially trigger further information leaks...

7.5CVSS6.9AI score0.04948EPSS
SaveExploits0References4
Prion
Prion
•added 2021/04/26 2:15 p.m.•34 views

Authentication flaw

OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authentication, which can be used to potentially trigger further information leaks...

5CVSS7.5AI score0.04948EPSS
SaveExploits0References8Affected Software4
UbuntuCve
UbuntuCve
•added 2021/04/26 2:15 p.m.•37 views

CVE-2020-15078

OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authentication, which can be used to potentially trigger further information leaks...

7.5CVSS6.9AI score0.04948EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
•added 2021/04/26 1:19 p.m.•43 views

CVE-2020-15078

OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authentication, which can be used to potentially trigger further information leaks...

7.5CVSS7.1AI score0.04948EPSS
SaveExploits0
Cvelist
Cvelist
•added 2021/04/26 1:19 p.m.•27 views

CVE-2020-15078

OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authentication, which can be used to potentially trigger further information leaks...

7.6AI score0.04948EPSS
SaveExploits0References8
CVE
CVE
•added 2021/04/26 1:19 p.m.•362 views

CVE-2020-15078

OpenVPN 2.5.1 and earlier versions are affected by CVE-2020-15078, permitting remote attackers to bypass authentication and access control and potentially trigger information leaks on servers configured with deferred authentication. The vulnerability affects the OpenVPN component responsible for ...

7.5CVSS6.7AI score0.04948EPSS
SaveExploits0References8Affected Software1
Mend
Mend
•added 2021/04/26 1:19 p.m.•6 views

CVE-2020-15078

OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authentication, which can be used to potentially trigger further information leaks...

8.7CVSS0.04948EPSS
SaveExploits0References18
Debian CVE
Debian CVE
•added 2021/04/26 1:19 p.m.•45 views

CVE-2020-15078

OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authentication, which can be used to potentially trigger further information leaks...

7.5CVSS7.1AI score0.04948EPSS
SaveExploits0
Fedora
Fedora
•added 2021/04/26 12:27 a.m.•60 views

[SECURITY] Fedora 34 Update: openvpn-2.5.2-1.fc34

OpenVPN is a robust and highly flexible tunneling application that uses all of the encryption, authentication, and certification features of the OpenSSL library to securely tunnel IP networks over a single UDP or TCP port. It can use the Marcus Franz Xaver Johannes Oberhumers LZO library for...

7.5CVSS1.5AI score0.04948EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2021/04/26 12:00 a.m.•27 views

Fedora: Security Advisory for openvpn (FEDORA-2021-b805c26afa)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS8.5AI score0.04948EPSS
SaveExploits0References2
NCSC
NCSC
•added 2021/04/26 12:00 a.m.•12 views

Vulnerability fixed in OpenVPN

A vulnerability has been fixed in OpenVPN. A malicious party could exploit the vulnerability to bypass authentication on an OpenVPN server configured to use "deferred authentication." Also, the malicious party can gain access gain access to information about the VPN settings. See the page below f...

7.5CVSS7.1AI score0.04948EPSS
SaveExploits0
CNNVD
CNNVD
•added 2021/04/26 12:00 a.m.•10 views

OpenVPN Access Control Vulnerability

Openvpn OpenVPN is an American OpenVPN package for creating virtual private network VPN encrypted tunnels that uses the OpenSSL library to encrypt data and control information and allows the created VPN to be authenticated using a public key, an electronic certificate, or a username/password. A...

7.5CVSS5.7AI score0.04948EPSS
SaveExploits0References17
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/26 12:00 a.m.•9 views

CVE-2020-15078: Authentication Bypass by Primary Weakness

OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authentication, which can be used to potentially trigger further information leaks...

7.5CVSS7.3AI score0.04948EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2021/04/25 12:00 a.m.•29 views

Fedora: Security Advisory for openvpn (FEDORA-2021-242ef81244)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS8.5AI score0.04948EPSS
SaveExploits0References2
Fedora
Fedora
•added 2021/04/24 6:07 p.m.•75 views

[SECURITY] Fedora 33 Update: openvpn-2.4.11-1.fc33

OpenVPN is a robust and highly flexible tunneling application that uses all of the encryption, authentication, and certification features of the OpenSSL library to securely tunnel IP networks over a single UDP or TCP port. It can use the Marcus Franz Xaver Johannes Oberhumers LZO library for...

7.5CVSS1.5AI score0.04948EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/04/22 12:00 a.m.•15 views

PT-2021-2690 · Openvpn +5 · Openvpn +5

Name of the Vulnerable Software and Affected Versions: OpenVPN versions 2.5.1 and earlier Description: The issue allows a remote attacker to bypass authentication and access control channel data on servers configured with deferred authentication. This can potentially be used to trigger further...

9.8CVSS7.8AI score0.05539EPSS
SaveExploits4References83
Tenable Nessus
Tenable Nessus
•added 2021/04/22 12:00 a.m.•54 views

FreeBSD : openvpn -- deferred authentication can be bypassed in specific circumstances (efb965be-a2c0-11eb-8956-1951a8617e30)

Gert Doring reports : OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authentication, which can be used to potentially trigger further information leaks. %NASLMINLEVEL 70300 C Tenable Network...

7.5CVSS7.2AI score0.04948EPSS
SaveExploits0References4
Rows per page
Query Builder