Description

OpenVPN Access Server 2.7.3 to 2.8.7 allows remote attackers to trigger an assert during the user authentication phase via incorrect authentication token data in an early phase of the user authentication resulting in a denial of service.

Remediation

References

CVE-2020-36382

Related Vulnerabilities

WordPress Plugin Booking.com Product Helper Unspecified Vulnerability (1.0.3)

WordPress Plugin Slideshow Gallery LITE Unspecified Vulnerability (1.7.4.2)

WordPress Plugin Sina Extension for Elementor Multiple Cross-Site Scripting Vulnerabilities (3.3.11)

Drupal Core 9.0.x Security Bypass (9.0.0 - 9.0.5)

ClipBucket Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-7666)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities CWE-754 CVE-2020-36382