Описание
The OpenVPN GUI installer before version 2.6.9 did not set the proper access control restrictions to the installation directory of OpenVPN binaries when using a non-standard installation path, which allows an attacker to replace binaries to run arbitrary executables.
Ссылки
- Permissions Required
- Permissions Required
Уязвимые конфигурации
Конфигурация 1Версия до 2.6.9 (исключая)
cpe:2.3:a:openvpn:openvpn_gui:*:*:*:*:*:*:*:*
EPSS
Процентиль: 12%
0.00214
Низкий
8.4 High
CVSS3
Дефекты
CWE-276
CWE-276
Связанные уязвимости
CVSS3: 8.4
github
больше 2 лет назад
The OpenVPN GUI installer before version 2.6.9 did not set the proper access control restrictions to the installation directory of OpenVPN binaries when using a non-standard installation path, which allows an attacker to replace binaries to run arbitrary executables.
CVSS3: 9.8
altlinux
больше 2 лет назад
ALT-PU-2024-4639: package `openvpn` update to version 2.6.10-alt1
CVSS3: 9.8
altlinux
около 2 лет назад
ALT-PU-2024-10885: package `openvpn` update to version 2.6.12-alt1
EPSS
Процентиль: 12%
0.00214
Низкий
8.4 High
CVSS3
Дефекты
CWE-276
CWE-276