furlongm openvpn-monitor allows Authorization Bypass to disconnect arbitrary clients

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2021-31606 · ADVISORY
• furlongm/openvpn-monitor commit ddb9d31 · WEB
• furlongm/openvpn-monitor · PACKAGE
• furlongm/openvpn-monitor release · WEB
• pypa/advisory-database · WEB
• packetstormsecurity.com/files/164274/OpenVPN-Monitor-1.1.3-Authorization-Bypass-Denial-Of-Service.html · WEB
• GitHub Advisory GHSA-5w5c-3g26-8mmc · ADVISORY

openvpn-monitor のその他の脆弱性

• CVE-2021-31605高 7.5furlongm openvpn-monitor through 1.1.3 allows %0a command injection via the OpenVPN management interface socket. This can shut down the serv…
• CVE-2021-31604中 6.5furlongm openvpn-monitor through 1.1.3 allows CSRF to disconnect an arbitrary client.