Description
Cross-site request forgery (CSRF) vulnerability in the Admin web interface in OpenVPN Access Server before 1.8.5 allows remote attackers to hijack the authentication of administrators for requests that create administrative users.
References (3)
Core 3
Core References
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/52802
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://osvdb.org/93111
Vendor Advisory x_refsource_confirm
http://openvpn.net/index.php/access-server/download-openvpn-as-sw/531-release-notes-v185.html
Scores
EPSS
0.0097
EPSS Percentile
57.9%
Details
CWE
CWE-352
Status
published
Products (1)
openvpn/openvpn_access_server
< 1.8.4
Published
May 13, 2014
Tracked Since
Feb 18, 2026