Unspecified Vulnerability in OpenVPN Access Server

OpenVPN is a software package from the American company OpenVPN for creating encrypted tunnels for virtual private networks VPNs that use the OpenSSL library to encrypt data and control information.OpenVPN Access Server is a commercial paid version of OpenVPN. A security vulnerability exists in...

CVE-2020-8953

OpenVPN Access Server 2.8.x before 2.8.1 allows LDAP authentication bypass except when a user is enrolled in two-factor authentication...

CVE-2020-8953

OpenVPN Access Server 2.8.x before 2.8.1 allows LDAP authentication bypass except when a user is enrolled in two-factor authentication...

Authentication flaw

OpenVPN Access Server 2.8.x before 2.8.1 allows LDAP authentication bypass except when a user is enrolled in two-factor authentication...

CVE-2020-8953

OpenVPN Access Server 2.8.x before 2.8.1 allows LDAP authentication bypass except when a user is enrolled in two-factor authentication...

CVE-2020-8953

OpenVPN Access Server 2.8.x before 2.8.1 allows LDAP authentication bypass except when a user is enrolled in two-factor authentication...

CVE-2020-8953

OpenVPN Access Server 2.8.x before 2.8.1 allows LDAP authentication bypass except when a user is enrolled in two-factor authentication...

CVE-2020-8953

CVE-2020-8953 affects OpenVPN Access Server 2.8.x prior to 2.8.1, where an LDAP authentication bypass is possible unless the user is enrolled in two-factor authentication. The description explicitly identifies the affected product/version and the root cause as an LDAP authentication bypass, enabl...

Inferring and hijacking VPN-tunneled TCP connections

We have discovered a vulnerability in Linux, FreeBSD, OpenBSD, MacOS, iOS, and Android which allows a malicious access point, or an adjacent user, to determine if a connected user is using a VPN, make positive inferences about the websites they are visiting, and determine the correct sequence and...

CVE-2020-8953: Improper Authentication

OpenVPN Access Server 2.8.x before 2.8.1 allows LDAP authentication bypass except when a user is enrolled in two-factor authentication...

PT-2020-20391

Name of the Vulnerable Software and Affected Versions OpenVPN Access Server versions 2.8.0 through 2.8.0 Description The issue allows LDAP authentication bypass, except when a user is enrolled in two-factor authentication. Recommendations For OpenVPN Access Server versions 2.8.0 through 2.8.0,...

OpenVPN Memory Corruption Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. freeBSD is a Unix-like operating system from the Google Foundation and the Open Handheld Alliance OHA. pts is a pseudo-terminal driver used in it. OpenBSD is a cross-platform, BSD-based, UNIX-lik...

CVE-2020-5180

Viscosity 1.8.2 on Windows and macOS allows an unprivileged user to set a subset of OpenVPN parameters, which can be used to load a malicious library into the memory of the OpenVPN process, leading to limited local privilege escalation. When a VPN connection is initiated using a TLS/SSL client...

CVE-2020-5180

Viscosity 1.8.2 on Windows and macOS allows an unprivileged user to set a subset of OpenVPN parameters, which can be used to load a malicious library into the memory of the OpenVPN process, leading to limited local privilege escalation. When a VPN connection is initiated using a TLS/SSL client...

Design/Logic Flaw

Viscosity 1.8.2 on Windows and macOS allows an unprivileged user to set a subset of OpenVPN parameters, which can be used to load a malicious library into the memory of the OpenVPN process, leading to limited local privilege escalation. When a VPN connection is initiated using a TLS/SSL client...

CVE-2020-5180

Viscosity 1.8.2 on Windows and macOS allows an unprivileged user to set a subset of OpenVPN parameters, which can be used to load a malicious library into the memory of the OpenVPN process, leading to limited local privilege escalation. When a VPN connection is initiated using a TLS/SSL client...

CVE-2020-5180

Viscosity 1.8.2 on Windows and macOS allows an unprivileged user to set a subset of OpenVPN parameters, which can be used to load a malicious library into the memory of the OpenVPN process, leading to limited local privilege escalation. When a VPN connection is initiated using a TLS/SSL client...

CVE-2020-5180

CVE-2020-5180 affects Viscosity 1.8.2 on Windows and macOS. An unprivileged user can set a subset of OpenVPN parameters, enabling loading of a malicious library into the memory of the OpenVPN process and causing limited local privilege escalation. When a VPN connection starts with a TLS/SSL clien...

PT-2020-18286

Name of the Vulnerable Software and Affected Versions Viscosity version 1.8.2 Description The issue allows an unprivileged user to set certain OpenVPN parameters, potentially loading a malicious library into the OpenVPN process memory. This can lead to limited local privilege escalation. When a V...

CVE-2020-5180: Undefined Security Weakness

Viscosity 1.8.2 on Windows and macOS allows an unprivileged user to set a subset of OpenVPN parameters, which can be used to load a malicious library into the memory of the OpenVPN process, leading to limited local privilege escalation. When a VPN connection is initiated using a TLS/SSL client...