CSRF in Openvpn Openvpn_access_server
CVE-2013-2692
Cross-site request forgery (CSRF) vulnerability in the Admin web interface in OpenVPN Access Server before 1.8.5 allows remote attackers to hijack the authentication of administrators for requests that create administrative users.
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.002 (39.6th percentile) — read the EPSS interpretation.
Affected products
- Openvpn Openvpn_access_server
- N/a — versions n/a
Weakness classification (CWE)
References
- 52802 (x_refsource_SECUNIA, third-party-advisory, Vendor Advisory)
- 93111 (x_refsource_OSVDB, vdb-entry)
- PSIRT-CNA@flexerasoftware.com (x_refsource_CONFIRM, Vendor Advisory)