Lucene search

K
cvelistOpenVPNCVELIST:CVE-2022-33737
HistoryJul 06, 2022 - 3:09 p.m.

CVE-2022-33737

2022-07-0615:09:08
CWE-708
OpenVPN
www.cve.org
3
openvpn
access server
log file
vulnerability
random generated password
cve-2022-33737

EPSS

0.002

Percentile

51.4%

The OpenVPN Access Server installer creates a log file readable for everyone, which from version 2.10.0 and before 2.11.0 may contain a random generated admin password

CNA Affected

[
  {
    "product": "OpenVPN Access Server",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "from version 2.10.0 and before 2.11.0"
      }
    ]
  }
]

EPSS

0.002

Percentile

51.4%

Related for CVELIST:CVE-2022-33737