CVE-2022-41097

An information disclosure vulnerability in the RADIUS protocol in Network Policy Server (NPS) allows an attacker to gain access to sensitive data. The flaw could be exploited to intercept authentication information or other data transmitted over the network.

The risk involves potential disclosure of confidential information, which could lead to network security breaches and theft of authentication data.

It is recommended to apply Windows security updates and monitor RADIUS traffic for suspicious activities.