OpenVPN certificate subject handling flaw may allow impersonation
Original title: USN-8953-1: OpenVPN vulnerability
Ubuntu says a remote authenticated user could possibly impersonate other users; no CVE or versions are given.
Ubuntu security notice USN-8953-1 says OpenVPN incorrectly handled certificate subject fields. A remote authenticated user could possibly use the issue to impersonate other users. The notice snippet does not name a CVE, affected versions, or a fixed release.
Unconfirmed: The feed snippet does not state a CVE id, affected versions, or whether a fix is available.
- The flaw is in how OpenVPN handles certificate subject fields.
- Exploitation requires a remote user who is already authenticated.
- The published snippet does not state a patch version.
Impact: Authenticated remote user may impersonate other users
| Product | Affected |
|---|---|
| OpenVPN | — |
From the original article
It was discovered that OpenVPN incorrectly handled certificate subject fields. A remote authenticated user could possibly use this issue to impersonate other users.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.