CVE-2024-8474

Publication date

2025-01-06 14:33:26

Family

OpenVPN

State

PUBLISHED

Description

OpenVPN Connect before version 3.5.0 can contain the configuration profiles clear-text private key which is logged in the application log, which an unauthorized actor can use to decrypt the VPN traffic