Miembros de
Boletines de Vulnerabilidades |
RADIUS Protocol Spoofing Vulnerability (Blast-RADIUS): July 2024 |
|
| Software afectado | Cisco |
|
On July 7, 2024, security researchers disclosed the following vulnerability in the RADIUS protocol: CVE-2024-3596: RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by an on-path attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature. This vulnerability may impact any RADIUS client and server. For a description of this More info: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-radius-spoofing-july-2024-87cCDwZ3?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=RADIUS%20Protocol%20Spoofing%20Vulnerability%20(Blast-RADIUS):%20July%202024%26vs_k=1 |
|
