Italiano
English
Summary:
rlm_eap/types/rlm_eap_pwd/eap_pwd.c in the EAP-pwd implementation in FreeRADIUS before 3.0.20 allows remote attackers to discover passwords because there is a side-channel information leak associated with the Hunting and Pecking abort for excessive iterations.
Published:
Wednesday, March 18, 2020 - 01:15
cvss:
5.0