description: In freeradius, the EAP-PWD function compute_password_element() leaks information about the password which allows an attacker to substantially reduce the size of an offline dictionary attack.
problem types: CWE-200
affected:
{
vendor: n/a
product: freeradius
versions:
version: unknown, status: affected
}