Description

Cross-site request forgery (CSRF) vulnerability in the Admin web interface in OpenVPN Access Server before 1.8.5 allows remote attackers to hijack the authentication of administrators for requests that create administrative users.

Remediation

References

CVE-2013-2692

Related Vulnerabilities

Oracle JRE CVE-2013-5819 Vulnerability (CVE-2013-5819)

Oracle HTTP Server CVE-2019-2414 Vulnerability (CVE-2019-2414)

Craft CMS Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-30130)

MySQL CVE-2019-2922 Vulnerability (CVE-2019-2922)

Oracle Database Server Improper Access Control Vulnerability (CVE-2026-71063)

Severity

Medium

Classification

CVE-2013-2692 CWE-352

Tags

Missing Update Known Vulnerabilities