Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-41859
HistoryJan 17, 2023 - 6:15 p.m.

Information disclosure

2023-01-1718:15:00
PRIOn knowledge base
www.prio-n.com
9
freeradius
eap-pwd
information disclosure
offline dictionary attack
nvd

7.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.7%

In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack.

CPENameOperatorVersion
freeradiuslt3.0.0