| Package | Affected versions | Patched versions |
|---|---|---|
| connect | < 3.5.0 | 3.5.0 |
OpenVPN Connect before version 3.5.0 can contain the configuration profile's clear-text private key which is logged in the application log, which an unauthorized actor can use to decrypt the VPN traffic
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free