Your submission was sent successfully! Close

You have successfully unsubscribed! Close

CVE-2020-15074

Published: 14 July 2020

OpenVPN Access Server older than version 2.8.4 and version 2.9.5 generates new user authentication tokens instead of reusing exiting tokens on reconnect making it possible to circumvent the initial token expiry timestamp.

Notes

AuthorNote
mdeslaur
OpenVPN Access Server is not based on the open-source openvpn
code.

Priority

Medium

CVSS 3 base score: 7.5

Status

Package Release Status
openvpn
Launchpad, Ubuntu, Debian
bionic Not vulnerable

eoan Ignored
(reached end-of-life)
focal Not vulnerable

precise Not vulnerable

trusty Not vulnerable

upstream Not vulnerable

xenial Not vulnerable