CVE-2020-15077: Openvpn Access Server

Medium severity, CVSS 5.3. EPSS: 1.2% chance of exploitation in the next 30 days.

OpenVPN Access Server 2.8.7 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authentication, which can be used to potentially trigger further information leaks.

Affected products

• Openvpn Openvpn Access Server: up to and including 2.8.7

Published 2021-06-04. Last modified 2026-06-17.