CVE-2021-3547
Assigner: OpenVPN
Published: 2021-07-12T10:35:52
State: PUBLISHED
affected: product: OpenVPN 3 Core Library
vendor: n/a
versions: status: affected
version: 3.6 and 3.6.1
descriptions: value: OpenVPN 3 Core Library version 3.6 and 3.6.1 allows a man-in-the-middle attacker to bypass the certificate authentication by issuing an unrelated server certificate using the same hostname found in the verify-x509-name option in a client configuration.
problemTypes: descriptions: cweId: CWE-305
description: CWE-305: Authentication Bypass by Primary Weakness
type: CWE