CVE-2022-3761CWE-295

OpenVPN Connect versions before 3.4.0.4506 (macOS) and OpenVPN Connect before 3.4.0.3100 (Windows) allows man-in-the-middle attackers to intercept…

published October 17, 2023

CVSS
—
EPSS
1%
Percentile
57.5
In the wild
Unconfirmed
What it is

OpenVPN Connect versions before 3.4.0.4506 (macOS) and OpenVPN Connect before 3.4.0.3100 (Windows) allows man-in-the-middle attackers to intercept configuration profile download requests which contains the users credentials

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00842 · 57.5th percentile
Weakness
CWE-295 · Improper Certificate Validation
Published
2023-10-17T12:10Z
EPSS history
Timeline
  • 17 OCT 12:10Z
    OpenVPN Connect versions before 3.4.0.4506 (macOS) and OpenVPN Connect before 3.4.0.3100 (Windows) allows man-in-the-middle attackers to intercept…
    cvelistv5