Vulnerabilities > Openvpn > Openvpn > 2.5.2

DATE CVE VULNERABILITY TITLE RISK
2022-03-18 CVE-2022-0547 Improper Authentication vulnerability in multiple products
OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of deferred authentication replies, which allows an external user to be granted access with only partially correct credentials.
network
low complexity
openvpn fedoraproject debian CWE-287
critical
 9.8
9.8
2021-07-02 CVE-2021-3606 Uncontrolled Search Path Element vulnerability in Openvpn
OpenVPN before version 2.5.3 on Windows allows local users to load arbitrary dynamic loadable libraries via an OpenSSL configuration file if present, which allows the user to run arbitrary code with the same privilege level as the main OpenVPN process (openvpn.exe). 		4.4
4.4