CVE-2022-33737: Openvpn Access Server

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

The OpenVPN Access Server installer creates a log file readable for everyone, which from version 2.10.0 and before 2.11.0 may contain a random generated admin password

Affected products

• Openvpn Openvpn Access Server: from 2.10.0, before 2.11.0 (fixed in 2.11.0)

Published 2022-07-06. Last modified 2026-06-17.