Vendor archive

openvpn-monitor_project CVEs

Beta · best-effort

3 CVEs tagged to vendor openvpn-monitor_project — 0 Critical, 2 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2021-31606

Published Sep 27, 2021

furlongm openvpn-monitor through 1.1.3 allows Authorization Bypass to disconnect arbitrary clients.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2021-31605

Published Sep 27, 2021

furlongm openvpn-monitor through 1.1.3 allows %0a command injection via the OpenVPN management interface socket. This can shut down the server via signal%20SIGTERM.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2021-31604

Published Sep 27, 2021

furlongm openvpn-monitor through 1.1.3 allows CSRF to disconnect an arbitrary client.

CVSS 6.5 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1