Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q6wh-cc86-fx6h

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью

Описание

OpenVPN 2.0.7 and earlier, when configured to use the --management option with an IP that is not 127.0.0.1, uses a cleartext password for TCP sessions to the management interface, which might allow remote attackers to view sensitive information or cause a denial of service.

OpenVPN 2.0.7 and earlier, when configured to use the --management option with an IP that is not 127.0.0.1, uses a cleartext password for TCP sessions to the management interface, which might allow remote attackers to view sensitive information or cause a denial of service.

EPSS

Процентиль: 75%
0.00911
Низкий

Связанные уязвимости

nvd
около 19 лет назад

OpenVPN 2.0.7 and earlier, when configured to use the --management option with an IP that is not 127.0.0.1, uses a cleartext password for TCP sessions to the management interface, which might allow remote attackers to view sensitive information or cause a denial of service.

debian
около 19 лет назад

OpenVPN 2.0.7 and earlier, when configured to use the --management opt ...

EPSS

Процентиль: 75%
0.00911
Низкий