VDB
CVE-2022-25166
CVE-2022-25166
PUBLISHED
CVSS 5 MEDIUM
An issue was discovered in Amazon AWS VPN Client 2.0.0. It is possible to include a UNC path in the OpenVPN configuration file when referencing file paths for parameters (such as auth-user-pass). When this file is imported and the client attempts to validate the file path, it performs an open operation on the path and leaks the user's Net-NTLMv2 hash to an external server. This could be exploited by having a user open a crafted malicious ovpn configuration file.
EPSS 1.47% · 72.9th percentile
Risk Scores
CVSS 3.1
5
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
EPSS Score
1.47%
72.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| amazon | aws_client_vpn | 2.0.0 |
| n/a | n/a | n/a |
Timeline
- Apr 14, 2022 CVE Published
- Apr 15, 2022 EPSS Score
- Jun 5, 2022 EPSS Score
- Jul 27, 2022 EPSS Score
- Nov 5, 2022 EPSS Score
- Dec 26, 2022 EPSS Score
- Feb 15, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 6, 2023 EPSS Score
- May 27, 2023 EPSS Score
- Sep 6, 2023 EPSS Score
- Oct 26, 2023 EPSS Score