Description
OpenVPN 2.0.7 and earlier, when configured to use the --management option with an IP that is not 127.0.0.1, uses a cleartext password for TCP sessions to the management interface, which might allow remote attackers to view sensitive information or cause a denial of service.
Remediation
References
Related Vulnerabilities
WordPress Plugin Bold Timeline Lite Cross-Site Scripting (1.1.4)
Oracle JRE Uncontrolled Resource Consumption Vulnerability (CVE-2026-21945)
WordPress Plugin Accept Donations with PayPal Cross-Site Scripting (1.3.1)
WordPress Plugin Simple Slideshow Manager Multiple Cross-Site Scripting Vulnerabilities (2.3)