CVE-2020-15077
First published: Fri Jun 04 2021(Updated: )
OpenVPN Access Server 2.8.7 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authentication, which can be used to potentially trigger further information leaks.
Credit: security@openvpn.net
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Openvpn Openvpn Access Server | <=2.8.7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-15077?
CVE-2020-15077 is a vulnerability in OpenVPN Access Server 2.8.7 and earlier versions that allows remote attackers to bypass authentication and access control channel data on servers configured with deferred authentication.
How severe is CVE-2020-15077?
CVE-2020-15077 has a severity rating of medium with a CVSS score of 5.3.
How can remote attackers exploit CVE-2020-15077?
Remote attackers can exploit CVE-2020-15077 by bypassing authentication and accessing control channel data on servers with deferred authentication.
What is the affected software version?
OpenVPN Access Server versions up to and including 2.8.7 are affected by CVE-2020-15077.
Are there any fixes available for CVE-2020-15077?
Yes, fixes for CVE-2020-15077 are available. Please refer to the official OpenVPN Security Advisory for the necessary updates.
- collector/nvd-index
- agent/weakness
- agent/softwarecombine
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/last-modified-date
- agent/first-publish-date
- agent/tags
- agent/event
- agent/description
- vendor/openvpn
- canonical/openvpn openvpn access server
- version/openvpn openvpn access server/2.8.7