Approved changes feed: RSS · Atom

cpe:2.3:a:openvpn:connect:*:*:*:*:*:android:*:*

part: a version: * update: *

VendorOpenvpn (69250643-f594-58ab-9395-086994cbe5f3)
ProductConnect (85eec71f-49f2-5f92-afc6-44512155abac)
Edition*
Language*
Software edition*
Target softwareandroid
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:docker/diadebeltphy/openvpn-connect-mac-download purl2cpe 2026-06-01 10:12:10.740378
pkg:docker/zhujintao/openvpn-connect purl2cpe 2026-06-01 10:12:10.740380

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-8474 vulnerable 2026-06-03 14:58:18.522414 Details available
OpenVPN Connect before version 3.5.0 can contain the configuration profile's clear-text private key which is logged in the application log, which an unauthorized actor can use to decrypt the VPN traffic
Published: 2025-01-06T14:33:26.129Z
Updated: 2025-01-06T16:54:38.487Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.