CVE-2022-3761: OpenVPN Inc OpenVPN Connect, слаба криптография

Описание

Оригинално описание

OpenVPN Connect versions before 3.4.0.4506 (macOS) and OpenVPN Connect before 3.4.0.3100 (Windows) allows man-in-the-middle attackers to intercept configuration profile download requests which contains the users credentials

Засегнати продукти

• OpenVPN Inc OpenVPN Connect: until 3.4.0.4506 преди 3.4.0.4506; until 3.4.0.3100 преди 3.4.0.3100

Вид слабост

• CWE-295 Неправилна валидация на сертификат

История

Други уязвимости в OpenVPN Inc OpenVPN Connect

• 9.4CVE-2026-9560

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2022-3761
• https://nvd.nist.gov/vuln/detail/CVE-2022-3761
• https://openvpn.net/vpn-server-resources/openvpn-connect-for-macos-change-log/
• https://openvpn.net/vpn-server-resources/openvpn-connect-for-windows-change-log/