Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2026/04/22 2:28 p.m.16 views

openvpn-auth-oauth2 returns FUNC_SUCCESS on client-deny, allowing unauthenticated VPN access

Summary When openvpn-auth-oauth2 is deployed in the experimental plugin mode shared library loaded by OpenVPN via the plugin directive, clients that do not support WebAuth/SSO e.g., the openvpn CLI on Linux are incorrectly admitted to the VPN despite being denied by the authentication logic. The...

10CVSS5.8AI score0.00438EPSS
SaveExploits0References8Affected Software1
Rows per page
Query Builder