CVE-2022-33738CWE-331

OpenVPN Access Server before 2.11 uses a weak random generator used to create user session token for the web portal

published July 6, 2022

CVSS
—
EPSS
1%
Percentile
59.8
In the wild
Unconfirmed
What it is

OpenVPN Access Server before 2.11 uses a weak random generator used to create user session token for the web portal

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00917 · 59.8th percentile
Weakness
CWE-331 · Insufficient Entropy
Published
2022-07-06T15:10Z
EPSS history
Timeline
  • 06 JUL 15:10Z
    OpenVPN Access Server before 2.11 uses a weak random generator used to create user session token for the web portal
    cvelistv5