critical9.8
CVE-2020-8953
OpenVPN Access Server 2.8.x before 2.8.1 allows LDAP authentication bypass (except when a user is enrolled in two-factor authentication).
Impact
OpenVPN Access Server 2.8.x before 2.8.1 allows LDAP authentication bypass (except when a user is enrolled in two-factor authentication).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openvpn | Openvpn Access Server | from 2.8.0 before 2.8.1 |