CVE-2022-33737 - The OpenVPN Access Server installer creates a log file readable for everyone, which from version 2.10.0 and before 2.11.0 may contain a random generated admin password

Back Back to CVE browser

HIGH

The OpenVPN Access Server installer creates a log file readable for everyone, which from version 2.10.0 and before 2.11.0 may contain a random generated admin password

Published Jul 6, 2022

7.5

HIGH

CVSS 3.1

EPSS 0.87%

Description

The OpenVPN Access Server installer creates a log file readable for everyone, which from version 2.10.0 and before 2.11.0 may contain a random generated admin password

Affected products

Vendor n/a Product OpenVPN Access Server Default
n/a
- Version
  from version 2.10.0 and before 2.11.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

OpenVPN Access Server

n/a

Version	Status	Constraints
from version 2.10.0 and before 2.11.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-532

CWE-708

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-36776
Advisory
https://openvpn.net/vpn-server-resources/release-notes/
x_refsource_MISCRelease NotesVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-36776		Advisory
https://openvpn.net/vpn-server-resources/release-notes/		x_refsource_MISCRelease NotesVendor Advisory