Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the XML-RPC API in the Desktop Client in OpenVPN Access Server 1.5.6 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) disconnecting established VPN sessions, (2) connect to arbitrary VPN servers, or (3) create VPN profiles and execute arbitrary commands via crafted API requests.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
OpenVPN Access Server Desktop Client 跨站请求伪造漏洞
Vulnerability Description
OpenVPN是美国OpenVPN公司的一个用于创建虚拟专用网络（VPN）加密通道的软件包，它使用OpenSSL库来加密数据与控制信息。OpenVPN Access Server是OpenVPN的商业收费版本，Desktop Client是其中的一个桌面客户端。 OpenVPN Access Server 1.5.6及之前版本的Desktop Client中XML-RPC API存在跨站请求伪造漏洞。远程攻击者可通过发送特制的API请求利用该漏洞断开已建立的VPN会话，连接到任意VPN服务器，或创建VPN
CVSS Information
N/A
Vulnerability Type
N/A