Published: 26/04/2021 Updated: 07/11/2023

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

OpenVPN 2.5.1 and previous versions versions allows a remote malicious users to bypass authentication and access control channel data on servers configured with deferred authentication, which can be used to potentially trigger further information leaks.

Vulnerable Product	Search on Vulmon	Subscribe to Product
openvpn openvpn
fedoraproject fedora 32
fedoraproject fedora 33
fedoraproject fedora 34
canonical ubuntu linux 18.04
canonical ubuntu linux 20.04
canonical ubuntu linux 20.10
canonical ubuntu linux 21.04
debian debian linux 9.0

Debian Bug report logs - #987380 CVE-2020-15078: Authentication bypass with deferred authentication Package: src:openvpn; Maintainer for src:openvpn is Bernhard Schmidt <berni@debianorg>; Reported by: Bernhard Schmidt <berni@debianorg> Date: Thu, 22 Apr 2021 20:30:01 UTC Severity: important Tags: fixed-upstream, se ...

OpenVPN 251 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authentication, which can be used to potentially trigger further information leaks (<a href="nvdnistgov/vuln/detail/CVE%2D2020%2D15078">CVE-2020-15078</a>) ...

OpenVPN 251 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authentication, which can be used to potentially trigger further information leaks This bug allows - under very specific circumstances - to trick a server using delayed authentication (plugin or ...

OPENVPN-WIZARD Not magic, installation and configuration interactive script OpenVPN (256) install script on progress Credits for angristan and its contributors githubcom/angristan/openvpn-install Why another openvpn script in place of contributing to the original ? Security The reason of this other script is because installing openvpn by the repostiories downloads

CWE-306 https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements https://community.openvpn.net/openvpn/wiki/CVE-2020-15078 https://security.gentoo.org/glsa/202105-25 https://usn.ubuntu.com/usn/usn-4933-1 https://lists.debian.org/debian-lts-announce/2022/05/msg00002.html https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GJUXEYHUPREEBPX23VPEKMFXUPVO3PMU/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PLDB3OBQ3AODYYRN7NRCABV6I4AUFAT6/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JGEGLC4YGBDN5CGHTNWN2GH6DJJA36T2/https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=987380 https://nvd.nist.gov https://alas.aws.amazon.com/ALAS-2021-1531.html

CVE-2020-15078

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect