Description
OpenVPN Access Server older than version 2.8.4 and version 2.9.5 generates new user authentication tokens instead of reusing exiting tokens on reconnect making it possible to circumvent the initial token expiry timestamp.
Remediation
References
Related Vulnerabilities
WordPress Plugin Backup Migration Cross-Site Request Forgery (1.2.9)
WordPress Plugin Amazon Tools Cross-Site Scripting (1.7.2)
MySQL CVE-2018-3067 Vulnerability (CVE-2018-3067)
WordPress Plugin Flickrpress PHP Object Injection (1.0.2)
Ruby on Rails URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2021-44528)