CVE-2020-15077 | BDVDB-2026-154751 Detail

OpenVPN Access Server

Description#

OpenVPN Access Server 2.8.7 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authentication, which can be used to potentially trigger further information leaks.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-305 Authentication Bypass by Primary Weakness

References#

https://openvpn.net/vpn-server-resources/release-notes/
https://openvpn.net/security-advisory/access-server-security-update-cve-2020-15077/

Exploit#

No public exploit known

History#

Version 12021-06-04Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.