CVE-2022-33737

The OpenVPN Access Server installer creates a log file readable for everyone, which from version 2.10.0 and before 2.11.0 may contain a random generated admin password

Score

CVSS 3.1 7.5 High

Status

Modified - security@openvpn.net

Published

2022-07-06

Last modified

2024-08-03

Weaknesses

CWE-532, CWE-708

Affected products

• Openvpn Access Server (Openvpn)

References

• https://openvpn.net/vpn-server-resources/release-notes/