{"id":"CVE-2022-3761","state":"PUBLISHED","title":"OpenVPN Connect versions before 3.4.0.4506 (macOS) and OpenVPN Connect before 3.4.0.3100 (Windows) allows man-in-the-middle attackers to intercept configuration profile download re","description":"OpenVPN Connect versions before 3.4.0.4506 (macOS) and OpenVPN Connect before 3.4.0.3100 (Windows) allows man-in-the-middle attackers to intercept configuration profile download requests which contains the users credentials","publishedAt":"2023-10-17T12:10:36.100Z","updatedAt":"2024-08-03T01:20:57.580Z","severity":null,"assigner":"OpenVPN","products":["OpenVPN Inc OpenVPN Connect"],"affected":[{"vendor":"OpenVPN Inc","product":"OpenVPN Connect","defaultStatus":"affected","versions":[{"version":"until 3.4.0.4506","status":"affected","lessThan":"3.4.0.4506","versionType":"macOS"},{"version":"until 3.4.0.3100","status":"affected","lessThan":"3.4.0.3100","versionType":"Windows"}],"platforms":["Windows","MacOS"]}],"references":["https://openvpn.net/vpn-server-resources/openvpn-connect-for-macos-change-log/","https://openvpn.net/vpn-server-resources/openvpn-connect-for-windows-change-log/"],"weaknesses":["CWE-295"],"ingestedAt":"2026-10-29T19:50:32.060Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/3xxx/CVE-2022-3761.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-3761","state":"PUBLISHED","datePublished":"2023-10-17T12:10:36.100Z","dateUpdated":"2024-08-03T01:20:57.580Z","assignerShortName":"OpenVPN","assignerOrgId":"36a55730-e66d-4d39-8ca6-3c3b3017965e","dateReserved":"2022-10-31T07:38:29.762Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"OpenVPN Connect versions before 3.4.0.4506 (macOS) and OpenVPN Connect before 3.4.0.3100 (Windows) allows man-in-the-middle attackers to intercept configuration profile download requests which contains the users credentials"}],"affected":[{"vendor":"OpenVPN Inc","product":"OpenVPN Connect","defaultStatus":"affected","versions":[{"version":"until 3.4.0.4506","status":"affected","lessThan":"3.4.0.4506","versionType":"macOS"},{"version":"until 3.4.0.3100","status":"affected","lessThan":"3.4.0.3100","versionType":"Windows"}],"platforms":["Windows","MacOS"]}],"references":[{"url":"https://openvpn.net/vpn-server-resources/openvpn-connect-for-macos-change-log/"},{"url":"https://openvpn.net/vpn-server-resources/openvpn-connect-for-windows-change-log/"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-295","lang":"en","description":"CWE-295 Improper Certificate Validation","type":"CWE"}]}],"providerMetadata":{"shortName":"OpenVPN","orgId":"36a55730-e66d-4d39-8ca6-3c3b3017965e","dateUpdated":"2023-10-17T12:10:36.100Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://openvpn.net/vpn-server-resources/openvpn-connect-for-macos-change-log/","tags":["x_transferred"]},{"url":"https://openvpn.net/vpn-server-resources/openvpn-connect-for-windows-change-log/","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T01:20:57.580Z"}}]}}}