CVE-2022-41859 - AskarLabs CVE Database

CVE-2022-41859

Vendor N/A

Product freeradius

Weakness CWE-200 · Info exposure

Published January 17, 2023

Last update November 3, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack.

Key dates

02Disclosure timeline

January 17, 2023 CVE published

November 3, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-41859 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/200.html

Related vulnerabilities

04Related CVE

CVE-2022-39289 Database log access in ZoneMinder CVE-2023-34094 ChuanhuChatGPT vulnerable to unauthorized configuration file access CVE-2022-46163 travel-support-program vulnerable to data exfiltration via Ransack query injection CVE-2023-24010 Data Distribution Service (DDS) Chain of Trust (CoT) violation in Fast DDS CVE-2024-13086 QTS, QuTS hero