CVE-2022-3761

CVE-2022-3761

Vendor Openvpn Inc

Product OpenVPN Connect

Weakness CWE-295

Published October 17, 2023

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

OpenVPN Connect versions before 3.4.0.4506 (macOS) and OpenVPN Connect before 3.4.0.3100 (Windows) allows man-in-the-middle attackers to intercept configuration profile download requests which contains the users credentials

Key dates

02Disclosure timeline

October 17, 2023 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-3761 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/295.html

Related vulnerabilities

Identifiers

CVE CVE-2022-3761

CWE CWE-295

Affected versions

Vendor Openvpn Inc

Product OpenVPN Connect

Affected ≥ until 3.4.0.4506 and < 3.4.0.4506

Vendor Openvpn Inc

Product OpenVPN Connect

Affected ≥ until 3.4.0.3100 and < 3.4.0.3100

01Description

02Disclosure timeline

03References

04Related CVE