2.10.3

DATE	CVE	VULNERABILITY TITLE	RISK
2022-07-06	CVE-2021-4234	Unspecified vulnerability in Openvpn Access Server OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a response to a reset packet sent from the client which the client again does not respond to, resulting in a limited amplification attack. network low complexity openvpn	7.5
2022-07-06	CVE-2022-33737	Information Exposure Through Log Files vulnerability in Openvpn Access Server The OpenVPN Access Server installer creates a log file readable for everyone, which from version 2.10.0 and before 2.11.0 may contain a random generated admin password network low complexity openvpn CWE-532	7.5
2022-07-06	CVE-2022-33738	Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) vulnerability in Openvpn Access Server OpenVPN Access Server before 2.11 uses a weak random generator used to create user session token for the web portal network low complexity openvpn CWE-338	7.5