Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Amazon AWS VPN Client 2.0.0. It is possible to include a UNC path in the OpenVPN configuration file when referencing file paths for parameters (such as auth-user-pass). When this file is imported and the client attempts to validate the file path, it performs an open operation on the path and leaks the user's Net-NTLMv2 hash to an external server. This could be exploited by having a user open a crafted malicious ovpn configuration file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Amazon AWS VPN Client 信息泄露漏洞
Vulnerability Description
Amazon AWS VPN Client是美国亚马逊（Amazon）公司的一种完全托管的远程访问 VPN 解决方案。 Amazon AWS VPN Client for Windows 2.0.0 版本存在安全漏洞，该漏洞源于允许任意文件写入系统，并部分控制内容。这可能会导致本地权限提升或拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A