CNNVD-202510-3579 Information

CNNVD ID

CNNVD-202510-3579

CVE-2025-11955

  • CNNVD Published: 2025-10-27

Description (Chinese)

TheGreenBow VPN是法国TheGreenBow公司的一个VPN客户端软件。 TheGreenBow VPN 7.5版本和7.6版本存在安全漏洞,该漏洞源于OCSP证书验证不正确,可能导致建立不安全的VPN隧道。

Description (English)

The GreenBow VPN is a VPN client of The GreenBow, France. There is a security loophole in The GreenBow VPN 7.5 and 7.6, which stems from the incorrect certification of OCSP certificates, which could lead to the establishment of unsafe VPN tunnels.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

TheGreenBow

Published

2025-10-27

Last Modified

2026-02-24

References

https://www.incibe.es/en/incibe-cert/notices/aviso/incorrect-validation-ocsp-certificates-thegreenbow-vpn-client-windows https://www.thegreenbow.com/en/support/security-alerts/

Patch

https://www.thegreenbow.com/en/support/security-alerts/

Share on: