description: OpenVPN Access Server before 2.11 uses a weak random generator used to create user session token for the web portal
problem types: CWE-331: Insufficient Entropy
affected:
{
product: OpenVPN Access Server
vendor: n/a
versions:
status: affected, version: until 2.11
}