CVE-2026-63649
2026-08-14
23h16 +00:00
23h16 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
The Windows interactive service in OpenVPN 2.4.0 through 2.6.21 and 2.7_alpha1 through 2.7.5 allows local authenticated users to bypass the trusted configuration directory constraint and load arbitrary configuration files via crafted options that bypass whitelist checks
CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Permissive List of Allowed Inputs The product implements a protection mechanism that relies on a list of inputs (or properties of inputs) that are explicitly allowed by policy because the inputs are assumed to be safe, but the list is too permissive - that is, it allows an input that is unsafe, leading to resultant weaknesses. |
