CVE-2020-15077CWE-305

CVE-2020-15077: vulnerability in OpenVPN Access Server

Published · Updated

Follow this CVE+ Monitor Access Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.2%
OpenVPN Access Server 2.8.7 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authentication, which can be used to potentially trigger further information leaks.
Affected products
n/a · OpenVPN Access Server