PT-2014-2613

Name of the Vulnerable Software and Affected Versions OpenVPN Access Server versions prior to 1.8.5 Description A cross-site request forgery CSRF issue exists in the Admin web interface, allowing remote attackers to hijack the authentication of administrators for requests that create administrati...

CVE-2013-2692: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Admin web interface in OpenVPN Access Server before 1.8.5 allows remote attackers to hijack the authentication of administrators for requests that create administrative users...