CVE-2020-15074CWE-302

OpenVPN Access Server older than version 2.8.4 and version 2.9.5 generates new user authentication tokens instead of reusing exiting tokens on reconnect making…

published July 14, 2020

CVSS
—
EPSS
1%
Percentile
63.8
In the wild
Unconfirmed
What it is

OpenVPN Access Server older than version 2.8.4 and version 2.9.5 generates new user authentication tokens instead of reusing exiting tokens on reconnect making it possible to circumvent the initial token expiry timestamp.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01045 · 63.8th percentile
Weakness
CWE-302 · Authentication Bypass by Assumed-Immutable Data
Published
2020-07-14T17:27Z
EPSS history
Timeline
  • 14 JUL 17:27Z
    OpenVPN Access Server older than version 2.8.4 and version 2.9.5 generates new user authentication tokens instead of reusing exiting tokens on reconnect making…
    cvelistv5