OpenVPN Access Server 2.8.7 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authentication, which can be used to potentially trigger further information leaks.
References
Link | Resource |
---|---|
https://openvpn.net/security-advisory/access-server-security-update-cve-2020-15077/ | Vendor Advisory |
https://openvpn.net/vpn-server-resources/release-notes/ | Release Notes Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: OpenVPN
Published: 2021-06-04T10:42:01
Updated: 2021-06-04T10:42:01
Reserved: 2020-06-25T00:00:00
Link: CVE-2020-15077
JSON object: View
NVD Information
Status : Analyzed
Published: 2021-06-04T11:15:07.697
Modified: 2022-08-05T15:18:52.147
Link: CVE-2020-15077
JSON object: View
Redhat Information
No data.