Description

OpenVPN Access Server older than version 2.8.4 and version 2.9.5 generates new user authentication tokens instead of reusing exiting tokens on reconnect making it possible to circumvent the initial token expiry timestamp.

Remediation

References

CVE-2020-15074

Related Vulnerabilities

Oracle JRE CVE-2013-1486 Vulnerability (CVE-2013-1486)

WordPress 3.9.x Cross-Domain Flash Injection Vulnerability (3.9 - 3.9.22)

MySQL CVE-2021-2081 Vulnerability (CVE-2021-2081)

WordPress Inadequate Encryption Strength Vulnerability (CVE-2012-6707)

Frontaccounting Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-1000890)

Severity

High

Classification

CVE-2020-15074 CWE-613 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities