freeradius is vulnerable to Information Disclosure. The vulnerability exists in the compute_password_element
function, which allows an attacker to substantially reduce the size of an offline dictionary attack, leaking information about the password