description: OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authentication, which can be used to potentially trigger further information leaks.
problem types: CWE-305: Authentication Bypass by Primary Weakness
affected:
{
product: OpenVPN
vendor: n/a
versions:
status: affected, version: 2.5.1 and earlier versions
}