high7.5
CVE-2022-41859
In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size o…
Impact
In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Freeradius | Freeradius | before 3.0.0 |