mirror of
https://gitlab.com/openconnect/ocserv.git
synced 2026-08-09 18:01:49 +08:00
radcli 1.5.0 validates Message-Authenticator in RADIUS responses CVE-2024-3596 (BlastRADIUS) and silently discards responses that lack it. Make sure that the Message-Authenticator message is known to the client via the dictionary. Signed-off-by: Nikos Mavrogiannopoulos <n.mavrogiannopoulos@gmail.com>