CVE-2022-3761

Publication date

2023-10-17 12:10:36

Family

OpenVPN

State

PUBLISHED

Description

OpenVPN Connect versions before 3.4.0.4506 (macOS) and OpenVPN Connect before 3.4.0.3100 (Windows) allows man-in-the-middle attackers to intercept configuration profile download requests which contains the users credentials