CVE-2019-11234

Name of the Vulnerable Software and Affected Versions FreeRADIUS versions prior to 3.0.19

Description The issue is related to improper authentication in the FreeRADIUS server, which can be exploited by a remote attacker to gain unauthorized access to protected information. This is similar to a "Dragonblood" issue, where reflection can be used for authentication spoofing.

Recommendations For versions prior to 3.0.19, update to version 3.0.19 or later to resolve the issue. As a temporary workaround, consider restricting access to the RADIUS server to minimize the risk of exploitation.