CVE-2022-33737 - AskarLabs CVE Database

CVE-2022-33737

Vendor N/A

Product OpenVPN Access Server

Weakness CWE-708

Published July 6, 2022

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The OpenVPN Access Server installer creates a log file readable for everyone, which from version 2.10.0 and before 2.11.0 may contain a random generated admin password

Key dates

02Disclosure timeline

July 6, 2022 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-33737 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/708.html

Related vulnerabilities

04Related CVE

CVE-2024-45417 Zoom Apps for macOS - Uncontrolled Resource Consumption CVE-2025-5467 Ubuntu Apport Insecure File Permissions Vulnerability CVE-2024-45426 Zoom Workplace Apps - Incorrect Ownership Assignment CVE-2023-4008 Incorrect Ownership Assignment in GitLab CVE-2023-29122 Incorrect file ownership of privileged service's libraries in Enel X JuiceBox