CVE-2022-33738: Weak RNG
Published Jul 6, 2022
·Updated
OpenVPN Access Server before 2.11 uses a weak random generator used to create user session token for the web portal
Affected Software
1 affected component
OpenVPN OpenVPN Access Server<2.11.0
Event History
Jul 6, 2022
CVE Published
via MITRE·03:10 PM
Data Sourced
via MITRE·03:10 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this OpenVPN Access Server vulnerability?
The vulnerability ID for this OpenVPN Access Server vulnerability is CVE-2022-33738.
2
What is the severity of CVE-2022-33738?
The severity of CVE-2022-33738 is high, with a CVSS score of 7.5.
3
What is the affected software for CVE-2022-33738?
The affected software for CVE-2022-33738 is OpenVPN Access Server before version 2.11.
4
What is the description of CVE-2022-33738 vulnerability?
CVE-2022-33738 is a vulnerability in OpenVPN Access Server before 2.11 that uses a weak random generator for creating user session tokens in the web portal.
5
Is there a fix available for CVE-2022-33738?
Yes, a fix is available for CVE-2022-33738. Users should update to OpenVPN Access Server version 2.11 or higher.