CVE-2013-2692 in OpenVPN
Summary
Cross-site request forgery (CSRF) vulnerability in the Admin web interface in OpenVPN Access Server before 1.8.5 allows remote attackers to hijack the authentication of administrators for requests that create administrative users.
Reservation
03/26/2013
Disclosure
05/13/2014
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 8637 | OpenVPN Admin Web cross-site request forgery | 352 | Unproven | Official fix | CVE-2013-2692 |