CVE-2024-8474

OpenVPN Connect affected: all supported builds prior to 3.5.0. Root cause: configuration profile’s clear-text private key is being logged in the application logs, enabling an unauthorized actor to use the key to decrypt VPN traffic. Impact: exposure of private keys could compromise confidentialit...

CVE-2022-3761

OpenVPN Connect on macOS and Windows is affected by CVE-2022-3761 due to errors in the certificate authentication procedure, allowing a man-in-the-middle attacker to intercept requests for downloading configuration profiles that contain user credentials. Affected versions include macOS before 3.4...