CVE-2004-0465: Openconnect Webconnect

Medium severity, CVSS 5.0. EPSS: 12.3% chance of exploitation in the next 30 days.

Directory traversal vulnerability in jretest.html in WebConnect 6.5 and 6.4.4, and possibly earlier versions, allows remote attackers to read keys within arbitrary INI formatted files via "..//" sequences in the WCP_USER parameter.

Affected products

• Openconnect Webconnect: version 6.4.4 only; version 6.5 only

Published 2004-12-31. Last modified 2026-06-16.