CVE-2020-15078

Katalog CVE

CVSS 7.5 · High EPSS 4,9%

Kerentanan Authentication Bypass by Primary Weakness pada openvpn, fedoraproject fedora +2 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authentication, which can be used to potentially trigger further information leaks.

Rincian

Terbit di NVD

26 April 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-305: Authentication Bypass by Primary Weakness
CWE-306: Missing Authentication for Critical Function

EPSS (30 hari)

4,9% peluang dieksploitasi; lebih tinggi dari 91,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://community.openvpn.net/openvpn/wiki/CVE-2020-15078 patch · advisory vendor
• https://lists.debian.org/debian-lts-announce/2022/05/msg00002.html mailing list · advisory pihak ketiga
• https://security.gentoo.org/glsa/202105-25 advisory pihak ketiga
• https://usn.ubuntu.com/usn/usn-4933-1 advisory pihak ketiga
• https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements broken link
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GJUXEYHUPREEB...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JGEGLC4YGBDN5...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PLDB3OBQ3AODY...