CVE-2022-0547

Katalog CVE

CVSS 9.8 · Critical EPSS 3,6%

Kerentanan Authentication Bypass by Primary Weakness pada openvpn, fedoraproject fedora +1 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of deferred authentication replies, which allows an external user to be granted access with only partially correct credentials.

Rincian

Terbit di NVD

18 Maret 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-305: Authentication Bypass by Primary Weakness
CWE-287: Improper Authentication

EPSS (30 hari)

3,6% peluang dieksploitasi; lebih tinggi dari 89,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://community.openvpn.net/openvpn/wiki/CVE-2022-0547 advisory vendor
• https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements advisory vendor
• https://openvpn.net/community-downloads/ patch · advisory vendor
• https://lists.debian.org/debian-lts-announce/2022/05/msg00002.html mailing list · advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFXJ35WKPME4H...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R36OYC5SJ6FLP...
• https://lists.debian.org/debian-lts-announce/2025/03/msg00005.html