CVE-2021-31604

furlongm openvpn-monitor through 1.1.3 allows CSRF to disconnect an arbitrary client...

PYSEC-2021-353

furlongm openvpn-monitor through 1.1.3 allows %0a command injection via the OpenVPN management interface socket. This can shut down the server via signal%20SIGTERM...

PYSEC-2021-354

furlongm openvpn-monitor through 1.1.3 allows Authorization Bypass to disconnect arbitrary clients...

Authorization

furlongm openvpn-monitor through 1.1.3 allows Authorization Bypass to disconnect arbitrary clients...

PYSEC-2021-352

furlongm openvpn-monitor through 1.1.3 allows CSRF to disconnect an arbitrary client...

PYSEC-2021-354

furlongm openvpn-monitor through 1.1.3 allows Authorization Bypass to disconnect arbitrary clients...

CVE-2021-31605

furlongm openvpn-monitor through 1.1.3 allows %0a command injection via the OpenVPN management interface socket. This can shut down the server via signal%20SIGTERM...

CVE-2021-31605

The CVE-2021-31605 issue affects furlongm openvpn-monitor up to version 1.1.3, where an input path of %0a allows command injection via the OpenVPN management interface socket. The underlying consequence stated is the potential shutdown of the server through signal SIGTERM. The Red Hat advisory an...

CVE-2021-31604

CVE-2021-31604 affects furlongm/openvpn-monitor up to version 1.1.3. The issue is a cross-site request forgery (CSRF) that allows disconnecting an arbitrary client. Root cause: CSRF in the disconnect action handling. Impact is described as an ability to disrupt a client connection; CVSS data in t...

CVE-2021-31604

furlongm openvpn-monitor through 1.1.3 allows CSRF to disconnect an arbitrary client...

CVE-2021-31606

furlongm openvpn-monitor through 1.1.3 allows Authorization Bypass to disconnect arbitrary clients...

CVE-2021-31606

CVE-2021-31606 affects furlongm openvpn-monitor up to and including version 1.1.3. The issue allows an Authorization Bypass that lets an attacker disconnect arbitrary clients. Exploitation details are not provided in the included documents beyond the bypass capability. The Red Hat, GHSA, OSV, and...

PT-2021-19445 · Furlongm · Openvpn-Monitor

Name of the Vulnerable Software and Affected Versions: furlongm openvpn-monitor versions 1.1.3 and earlier Description: The issue allows for Authorization Bypass, enabling the disconnection of arbitrary clients. Recommendations: For furlongm openvpn-monitor versions 1.1.3 and earlier, update to a...

OpenVPN Monitor 1.1.3 Cross Site Request Forgery Vulnerability

OpenVPN Monitor versions 1.1.3 and below suffer from a cross site request forgery vulnerability that allows an attacker to disconnect arbitrary VPN clients. Product: openvpn-monitor Vendor: https://github.com/furlongm/openvpn-monitor CSNC ID: CSNC-2021-011 CVE ID: CVE-2021-31604 Subject: Cross-Si...

Openvpn OpenVPN 授权问题漏洞

Openvpn OpenVPN is a software package from the American company OpenVPN Openvpn for creating encrypted tunnels for Virtual Private Networks VPNs, which uses the OpenSSL library to encrypt data and control information, and allows created VPNs to be authenticated using a public key, an e-certificat...

Openvpn OpenVPN 命令注入漏洞

Openvpn OpenVPN is a software package from the US-based OpenVPN Openvpn for creating virtual private network VPN encrypted tunnels that use the OpenSSL library to encrypt data and control information, and allow created VPNs to be authenticated using a public key, an e-certificate, or a...

Openvpn OpenVPN 跨站请求伪造漏洞

Openvpn OpenVPN is a software package from the US company OpenVPN Openvpn for creating encrypted tunnels for Virtual Private Networks VPNs, which uses the OpenSSL library to encrypt data and control information, and allows created VPNs to be authenticated using a public key, an e-certificate, or ...

SolarWinds Network Performance Monitor ExecuteVBScript Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Network Performance Monitor. Authentication is required to exploit this vulnerability. The specific flaw exists within the ExecuteVBScript method. The issue results from the lack of proper...

SolarWinds Network Performance Monitor FromJson Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Network Performance Monitor. Authentication is required to exploit this vulnerability. The specific flaw exists within the SolarWinds.Serialization library. The issue results from the lack...

Security Bulletin: Multiple vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Business Monitor (CVE-2021-29842)

Summary IBM WebSphere Application Server is shipped as a component of Business Monitor. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixe...