CVE-2021-3547 | BDVDB-2026-156644 Detail

Description#

OpenVPN 3 Core Library version 3.6 and 3.6.1 allows a man-in-the-middle attacker to bypass the certificate authentication by issuing an unrelated server certificate using the same hostname found in the verify-x509-name option in a client configuration.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12021-07-12Record published in the CVE List.
2. Version 22024-08-03Most recent update recorded in the CVE List.