Description

The OpenVPN Access Server installer creates a log file readable for everyone, which from version 2.10.0 and before 2.11.0 may contain a random generated admin password

Remediation

References

CVE-2022-33737

Related Vulnerabilities

WordPress Plugin Sticky Popup Cross-Site Scripting (1.2)

WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-3747)

WordPress Plugin 404 SEO Redirection Cross-Site Scripting (1.3)

WordPress Plugin Slideshow Pro 'upload.php' Arbitrary File Upload (2.1)

WordPress Plugin MiwoFTP-File & Folder Manager Multiple Vulnerabilities (1.0.5)

Severity

High

Classification

CVE-2022-33737 CWE-532 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities