← Back

Globalprotect Openconnect Project

globalprotect-openconnect_project

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Globalprotect Openconnect
globalprotect-openconnect
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-45810
1Globalprotect Openconnect Project
1Globalprotect Openconnect
Jun 17, 2026
Mar 22, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
GlobalProtect-openconnect versions prior to 2.0.0 (exclusive) are affected by incorrect access control in GPService through DBUS, GUI. The way GlobalProtect-Openconnect is set up enables arbitrary users to start a VPN co...Show more
GlobalProtect-openconnect versions prior to 2.0.0 (exclusive) are affected by incorrect access control in GPService through DBUS, GUI. The way GlobalProtect-Openconnect is set up enables arbitrary users to start a VPN connection to arbitrary servers. By hosting an openconnect compatible server, the attack can redirect the entire host's traffic via their own server.Show less
CVE-2021-45809
1Globalprotect Openconnect Project
1Globalprotect Openconnect
Jun 17, 2026
Mar 22, 2022
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
GlobalProtect-openconnect versions prior to 1.4.3 are affected by incorrect access control in GPService through DBUS, GUI Application. The way GlobalProtect-Openconnect is set up enables arbitrary users to execute comman...Show more
GlobalProtect-openconnect versions prior to 1.4.3 are affected by incorrect access control in GPService through DBUS, GUI Application. The way GlobalProtect-Openconnect is set up enables arbitrary users to execute commands as root by submitting the `--script=<script>` parameter.Show less