Description
OpenVPN 2.0.7 and earlier, when configured to use the --management option with an IP that is not 127.0.0.1, uses a cleartext password for TCP sessions to the management interface, which might allow remote attackers to view sensitive information or cause a denial of service.
Remediation
References
Related Vulnerabilities
Apache HTTP Server Improper Locking Vulnerability (CVE-2002-1850)
Oracle JRE CVE-2014-0429 Vulnerability (CVE-2014-0429)
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-1159)
WordPress Plugin Lim4wp 'upload.php' Arbitrary File Upload (1.1.1)
PostgreSQL Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2018-1053)