← CVE Intelligence

CVE-2023-7235

OpenVPN / OpenVPN PUBLISHED

Description (CNA)

The OpenVPN GUI installer before version 2.6.9 did not set the proper access control restrictions to the installation directory of OpenVPN binaries when using a non-standard installation path, which allows an attacker to replace binaries to run arbitrary executables.

Affected (CNA)

Vendor / productVersions
OpenVPN / OpenVPNaffected 0 through 2.6.8

CWE

CWE-276

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.