CVE-2020-15074 | BDVDB-2026-138821 Detail

OpenVPN Access Server

Description#

OpenVPN Access Server older than version 2.8.4 and version 2.9.5 generates new user authentication tokens instead of reusing exiting tokens on reconnect making it possible to circumvent the initial token expiry timestamp.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-302 Authentication Bypass by Assumed-Immutable Data

References#

https://openvpn.net/vpn-server-resources/release-notes/

Exploit#

No public exploit known

History#

Version 12020-07-14Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.