Skip to content

Commit

Permalink
Add Message-Authenticator as first attribute in order to mitigate CVE…
Browse files Browse the repository at this point in the history
  • Loading branch information
pendula95 committed Oct 10, 2024
1 parent 309ea5b commit 886b43a
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion src/main/java/org/tinyradius/packet/RadiusPacket.java
Original file line number Diff line number Diff line change
Expand Up @@ -865,7 +865,7 @@ protected void encodePacket(OutputStream out, String sharedSecret, RadiusPacket
}
}
if (!exists) {
this.attributes.add(new RadiusAttribute(MESSAGE_AUTHENTICATOR, new byte[16]));
this.attributes.addFirst(new RadiusAttribute(MESSAGE_AUTHENTICATOR, new byte[16]));
}
}

Expand Down

0 comments on commit 886b43a

Please sign in to comment.