Description

OpenVPN Access Server older than version 2.8.4 and version 2.9.5 generates new user authentication tokens instead of reusing exiting tokens on reconnect making it possible to circumvent the initial token expiry timestamp.

Remediation

References

CVE-2020-15074

Related Vulnerabilities

Oracle Database Server Improper Privilege Management Vulnerability (CVE-2025-50066)

WordPress Plugin Data Tables Generator by Supsystic Multiple Vulnerabilities (1.9.96)

Magento Insufficient Verification of Data Authenticity Vulnerability (CVE-2019-8112)

Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-35986)

WordPress Plugin User Rights Access Manager Security Bypass (1.0.3)

Severity

High

Classification

CVE-2020-15074 CWE-613 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities