VDB
DEBIAN-CVE-2022-0547
DEBIAN-CVE-2022-0547
PUBLISHED
CVSS 9.800000190734863 CRITICAL
OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of deferred authentication replies, which allows an external user to be granted access with only partially correct credentials.
Risk Scores
CVSS 3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:14 | openvpn | 0, 0, 0 |
| Debian:13 | openvpn | 0, 0, 0 |
| Debian:11 | openvpn | 2.5.1-3, 0, 2.5.1-3 |
| Debian:12 | openvpn | 0, 0, 0 |
Timeline
- Mar 18, 2022 CVE Published
- Apr 28, 2026 CVE Updated