Description

OpenVPN Access Server 2.8.7 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authentication, which can be used to potentially trigger further information leaks.

Remediation

References

CVE-2020-15077

Related Vulnerabilities

WordPress Plugin PDW Media File Browser 'upload.php' Arbitrary File Upload (1.1)

WordPress Plugin MW WP Form Cross-Site Scripting (5.0.6)

WordPress Plugin Images Slideshow by 2J-Image Slider Unspecified Vulnerability (1.2.15)

WordPress Plugin Simple 301 Redirects by BetterLinks Multiple Security Bypass Vulnerabilities (2.0.3)

WordPress Plugin Paid Memberships Pro-Restrict Member Access to Content, Courses, Communities-Free or Paid Subscriptions SQL Injection (2.5.5)

Severity

Medium

Classification

CVE-2020-15077 CWE-287 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities