Vulnerability Database

300,445

Total vulnerabilities in the database

CVE-2013-2692

Cross-site request forgery (CSRF) vulnerability in the Admin web interface in OpenVPN Access Server before 1.8.5 allows remote attackers to hijack the authentication of administrators for requests that create administrative users.

  • Published: May 13, 2014
  • Updated: Nov 9, 2025
  • CVE: CVE-2013-2692
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.8
  • AV:N/AC:M/Au:N/C:P/I:P/A:P

CWEs:

Software From Fixed in
openvpn / openvpn_access_server - 1.8.4.x