CVE-2017-5868

CRLF injection vulnerability in the web interface in OpenVPN Access Server 2.1.4 allows remote attackers to inject arbitrary HTTP headers and consequently conduct session fixation attacks and possibly HTTP response splitting attacks via "%0A" characters in the PATH_INFO to __session_start__/.

CVSS v3.0 NVD

6.1 MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CVSS v2.0 NVD

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

4.62% chance of exploitation in the next 30 days, 92nd percentile

Nuclei

medium · CWE-93

Published

2017-05-25

Updated

2024-08-05

Proof-of-concept exploits (1)

• http://www.openwall.com/lists/oss-security/2017/05/23/13

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-5868.yaml

Security advisories

• http://www.securitytracker.com/id/1038547
• https://sysdream.com/news/lab/2017-05-05-cve-2017-5868-openvpn-access-server-crlf-injecti…

References

• CVE Record
• NVD entry