ALT-PU-2022-2268-1
Closed vulnerabilities
Published: 2022-03-24
BDU:2022-01642
Уязвимость программного обеспечения OpenVPN, связанная с недостатками процедуры аутентификации, позволяющая нарушителю обойти процесс аутентификации и получить доступ к конфиденциальной информации
Severity: MEDIUM (4.8)
Vector: AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
References:
Published: 2022-03-18
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2022-0547
OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of deferred authentication replies, which allows an external user to be granted access with only partially correct credentials.
Severity: CRITICAL (9.8)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References:
- https://community.openvpn.net/openvpn/wiki/CVE-2022-0547
- https://community.openvpn.net/openvpn/wiki/CVE-2022-0547
- https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements
- https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements
- [debian-lts-announce] 20220503 [SECURITY] [DLA 2992-1] openvpn security update
- [debian-lts-announce] 20220503 [SECURITY] [DLA 2992-1] openvpn security update
- FEDORA-2022-cb4c1146dc
- FEDORA-2022-cb4c1146dc
- FEDORA-2022-7d46acce7c
- FEDORA-2022-7d46acce7c
- https://openvpn.net/community-downloads/
- https://openvpn.net/community-downloads/