NetSight
IP …
high7.5

CVE-2020-15078

OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authe…

Impact

OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authentication, which can be used to potentially trigger further information leaks.

Affected products

VendorProductAffected versions
OpenvpnOpenvpn
before 2.4.11
from 2.5.0 before 2.5.2
FedoraprojectFedora
Versions 32, 33, 34
CanonicalUbuntu Linux
Versions 18.04, 20.04, 20.10, 21.04
DebianDebian Linux
Version 9.0

Weakness classification

CWE-305CWE-306

References