Fedora freeradius CVE-2019-13456 Information Disclosure Vulnerability

Description

An information leak was discovered in the implementation of EAP-pwd in freeradius. An attacker could initiate several EAP-pwd handshakes to leak information, which can then be used to recover the user's WiFi password by performing dictionary and brute-force attacks.

Affected Applications

freeradius

CVE References

Other References