CVE-2024-8474

OpenVPN Connect versions prior to 3.5.0 are vulnerable to the exposure of sensitive information. The application may log the configuration profile's clear-text private key into the application log, which could be accessed by an unauthorized actor. If obtained, this key can be used to decrypt VPN ...

CVE-2022-3761

OpenVPN Connect on macOS and Windows is affected by CVE-2022-3761 due to errors in the certificate authentication procedure, allowing a man-in-the-middle attacker to intercept requests for downloading configuration profiles that contain user credentials. Affected versions include macOS before 3.4...