Description

The OpenVPN Access Server installer creates a log file readable for everyone, which from version 2.10.0 and before 2.11.0 may contain a random generated admin password

Remediation

References

CVE-2022-33737

Related Vulnerabilities

WordPress Plugin Mailster-Email Newsletter for WordPress Local File Inclusion (4.0.6)

WordPress Plugin WP e-Commerce Predictive Search Cross-Site Scripting (1.1.1)

Jenkins Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-1000194)

WordPress Plugin LiveGrounds 'uid' Parameter Cross-Site Scripting (0.42)

PHP Improper Input Validation Vulnerability (CVE-2012-0831)

Severity

High

Classification

CVE-2022-33737 CWE-532 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities