NetSight
high7.5

CVE-2022-41859

In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size o…

Impact

In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack.

Affected products

VendorProductAffected versions
FreeradiusFreeradius
before 3.0.0

Weakness classification

References