NuytsTech Security

CVE-2022-0547

by ·

OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of deferred authentication replies, which allows an external user to be granted access with only partially correct credentials.

Date published : 2022-03-18

https://community.openvpn.net/openvpn/wiki/CVE-2022-0547

https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements

Tags: