Junglewise Threat Intelligence

CVE-2021-31606: PYSEC-2021-354 - furlongm openvpn-monitor through 1.1.3 allows Authorization Bypass to disconnect arbitrary clients.

CVE-2021-31606 · Severity: low · CVSS 3.1 · Published 2021-09-27

Technologies: openvpn-monitor (PyPI). Vendors: PyPI.

Executive brief

furlongm openvpn-monitor through 1.1.3 allows Authorization Bypass to disconnect arbitrary clients.

Affected products

PyPI openvpn-monitor

Related threats

PYSEC-2021-353 - furlongm openvpn-monitor through 1.1.3 allows %0a command injection via the OpenVPN management interface socket. This can shut down the serv
PYSEC-2021-352 - furlongm openvpn-monitor through 1.1.3 allows CSRF to disconnect an arbitrary client.