EUVD-2020-3816

Malware in sbrugna...

Design/Logic Flaw

An issue was discovered in OpenVPN Access Server before 2.7.0 and 2.8.x before 2.8.3. With the full featured RPC2 interface enabled, it is possible to achieve a temporary DoS state of the management interface when sending an XML Entity Expansion XEE payload to the XMLRPC based RPC2 interface. The...

PT-2020-12625

Name of the Vulnerable Software and Affected Versions OpenVPN Access Server versions 2.7.0 and earlier OpenVPN Access Server versions 2.8.x through 2.8.2 Description An issue was discovered in OpenVPN Access Server. With the full featured RPC2 interface enabled, it is possible to achieve a...

CVE-2020-11462: Improper Restriction of Recursive Entity References in DTDs

An issue was discovered in OpenVPN Access Server before 2.7.0 and 2.8.x before 2.8.3. With the full featured RPC2 interface enabled, it is possible to achieve a temporary DoS state of the management interface when sending an XML Entity Expansion XEE payload to the XMLRPC based RPC2 interface. The...