User Enumeration Flaw in Pritunl VPN
CVE-2020-25200

5.3MEDIUM

Key Information:

Vendor

Pritunl

Status
Pritunl
Vendor
CVE Published:
1 October 2020

Badges

👾 Exploit Exists🟡 Public PoC🟣 EPSS 55%

What is CVE-2020-25200?

The vulnerability in Pritunl VPN enables attackers to enumerate valid usernames through systematic login attempts. When a user tries to log in, the server initially responds with an error 401 for invalid usernames. After approximately 20 attempts, if a username is valid, the response changes to error 400. This behavior allows attackers to discern valid usernames, potentially leading to unauthorized access or targeted attacks. The vendor has stated this behavior is part of the intended design, leading to ongoing discussions about its classification as a vulnerability.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

pritunl-CVE-2020-25200
Created by lukaszstu

References

https://pritunl.com
x_refsource_MISC
https://pritunl.com/security
x_refsource_MISC
https://github.com/lukaszstu/pritunl/blob/master/CVE-2020...
x_refsource_MISC

EPSS Score

55% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability Reserved

.