Your submission was sent successfully! Close

You have successfully unsubscribed! Close

CVE-2020-15074

Published: 14 July 2020

OpenVPN Access Server older than version 2.8.4 and version 2.9.5 generates new user authentication tokens instead of reusing exiting tokens on reconnect making it possible to circumvent the initial token expiry timestamp.

Notes

AuthorNote
mdeslaur 
OpenVPN Access Server is not based on the open-source openvpn
code.

Priority

Medium

CVSS 3 base score: 7.5

Status

Package Release Status
openvpn
Launchpad, Ubuntu, Debian 		bionic Not vulnerable

eoan Ignored
(reached end-of-life)
focal Not vulnerable

precise Not vulnerable

trusty Not vulnerable

upstream Not vulnerable

xenial Not vulnerable

References

Join the discussion

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›

Further reading