GHSA-4258-VCJW-WWXX furlongm openvpn-monitor command injection

furlongm openvpn-monitor through 1.1.3 allows %0a command injection via the OpenVPN management interface socket. This can shut down the server via signal SIGTERM...

GHSA-5W5C-3G26-8MMC furlongm openvpn-monitor allows Authorization Bypass to disconnect arbitrary clients

furlongm openvpn-monitor through 1.1.3 allows Authorization Bypass to disconnect arbitrary clients...

CVE-2021-31606

furlongm openvpn-monitor through 1.1.3 allows Authorization Bypass to disconnect arbitrary clients...

CVE-2021-31605

furlongm openvpn-monitor through 1.1.3 allows %0a command injection via the OpenVPN management interface socket. This can shut down the server via signal%20SIGTERM...

Command injection

furlongm openvpn-monitor through 1.1.3 allows %0a command injection via the OpenVPN management interface socket. This can shut down the server via signal%20SIGTERM...

Authorization

furlongm openvpn-monitor through 1.1.3 allows Authorization Bypass to disconnect arbitrary clients...

PYSEC-2021-352

furlongm openvpn-monitor through 1.1.3 allows CSRF to disconnect an arbitrary client...

CVE-2021-31605

furlongm openvpn-monitor through 1.1.3 allows %0a command injection via the OpenVPN management interface socket. This can shut down the server via signal%20SIGTERM...

CVE-2021-31605

The CVE-2021-31605 issue affects furlongm openvpn-monitor up to version 1.1.3, where an input path of %0a allows command injection via the OpenVPN management interface socket. The underlying consequence stated is the potential shutdown of the server through signal SIGTERM. The Red Hat advisory an...

CVE-2021-31604

furlongm openvpn-monitor through 1.1.3 allows CSRF to disconnect an arbitrary client...

CVE-2021-31604

CVE-2021-31604 affects furlongm/openvpn-monitor up to version 1.1.3. The issue is a cross-site request forgery (CSRF) that allows disconnecting an arbitrary client. Root cause: CSRF in the disconnect action handling. Impact is described as an ability to disrupt a client connection; CVSS data in t...

CVE-2021-31606

furlongm openvpn-monitor through 1.1.3 allows Authorization Bypass to disconnect arbitrary clients...

PT-2021-19445 · Furlongm · Openvpn-Monitor

Name of the Vulnerable Software and Affected Versions: furlongm openvpn-monitor versions 1.1.3 and earlier Description: The issue allows for Authorization Bypass, enabling the disconnection of arbitrary clients. Recommendations: For furlongm openvpn-monitor versions 1.1.3 and earlier, update to a...

CVE-2021-31606: Improper Authentication

furlongm openvpn-monitor through 1.1.3 allows Authorization Bypass to disconnect arbitrary clients...

PT-2021-19443

Name of the Vulnerable Software and Affected Versions furlongm openvpn-monitor versions 1.1.3 and earlier Description The issue allows for Cross-Site Request Forgery CSRF attacks, which can be used to disconnect an arbitrary client. Recommendations For versions 1.1.3 and earlier, as a temporary...

CVE-2021-31606

CVE-2021-31606 affects furlongm openvpn-monitor up to and including version 1.1.3. The issue allows an Authorization Bypass that lets an attacker disconnect arbitrary clients. Exploitation details are not provided in the included documents beyond the bypass capability. The Red Hat, GHSA, OSV, and...

CVE-2021-31605: Improper Neutralization of Special Elements used in an OS Command

furlongm openvpn-monitor through 1.1.3 allows %0a command injection via the OpenVPN management interface socket. This can shut down the server via signal%20SIGTERM...

CVE-2021-31604: Cross-Site Request Forgery (CSRF)

furlongm openvpn-monitor through 1.1.3 allows CSRF to disconnect an arbitrary client...

PT-2021-19444

Name of the Vulnerable Software and Affected Versions furlongm openvpn-monitor versions 1.1.3 and earlier Description The issue allows %0a command injection via the OpenVPN management interface socket, which can be used to shut down the server via signal SIGTERM. Recommendations For versions 1.1....