Description

OpenVPN Access Server before 2.11 uses a weak random generator used to create user session token for the web portal

Remediation

References

CVE-2022-33738

Related Vulnerabilities

Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-5397)

Moodle Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2011-4292)

Oracle Application Server Improper Authentication Vulnerability (CVE-2002-0563)

WordPress Plugin Contact Form Submissions Unspecified Vulnerability (1.2)

Apache Tomcat Uncontrolled Resource Consumption Vulnerability (CVE-2019-0199)

Severity

High

Classification

CVE-2022-33738 CWE-338 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities