CVE-2020-15077: Medium severity openvpn access server vulnerability
OpenVPN Access Server 2.8.7 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authentication, which can be used to potentially trigger further information leaks.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-15077?
CVE-2020-15077 is a vulnerability in OpenVPN Access Server 2.8.7 and earlier versions that allows remote attackers to bypass authentication and access control channel data on servers configured with deferred authentication.
How severe is CVE-2020-15077?
CVE-2020-15077 has a severity rating of medium with a CVSS score of 5.3.
How can remote attackers exploit CVE-2020-15077?
Remote attackers can exploit CVE-2020-15077 by bypassing authentication and accessing control channel data on servers with deferred authentication.
What is the affected software version?
OpenVPN Access Server versions up to and including 2.8.7 are affected by CVE-2020-15077.
Are there any fixes available for CVE-2020-15077?
Yes, fixes for CVE-2020-15077 are available. Please refer to the official OpenVPN Security Advisory for the necessary updates.