Description OpenVPN Access Server before 2.11 uses a weak random generator used to create user session token for the web portal Remediation References CVE-2022-33738 Related Vulnerabilities Joomla Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2015-4654) MySQL CVE-2018-3200 Vulnerability (CVE-2018-3200) WordPress Plugin W3 Total Cache Backdoor (0.9.2.2) WordPress Plugin Custom css-js-php Unspecified Vulnerability (2.0.2) MyBB Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2014-9240) Severity High Classification CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Tags Missing Update Known Vulnerabilities CWE-338 CVE-2022-33738