CVE-2022-41859

2023-01-1700:00:00

CWE-200

redhat

www.cve.org

freeradius

eap-pwd

password leakage

offline attack

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

51.1%

JSON

In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "freeradius",
    "versions": [
      {
        "version": "unknown",
        "status": "affected"
      }
    ]
  }
]