CVE-2020-15075

Summary

OpenVPN Connect installer for macOS version 3.2.6 and older may corrupt system critical files it should not have access via symlinks in /tmp.

Affected Software

VendorProductVersion RangeStatus
n/aOpenVPN Connect3.2.6 and prior versionsaffected

Weaknesses

  • CWE-61: CWE-61: UNIX Symbolic Link (Symlink) Following

ADP Enrichment

CVE Program Container

Additional References

References