{"id":"CVE-2023-52160","aliases":["ALPINE-CVE-2023-52160","ALSA-2024:2517","AZL-35457","AZL-35483","BELL-CVE-2023-52160","CLSA-2025-1753802388","CLSA-2026-1777476468","DEBIAN-CVE-2023-52160","DLA-3743-1","EUVD-2023-56833","GHSA-hj6q-jrf5-2pm3","MGASA-2024-0053","RHSA-2024:2517","RLSA-2024:2517","SUSE-SU-2024:0764-1","SUSE-SU-2024:0764-2","SUSE-SU-2024:0818-1","SUSE-SU-2024:0819-1","SUSE-SU-2024:3354-1","SUSE-SU-2025:20089-1","UBUNTU-CVE-2023-52160","openSUSE-SU-2024:13694-1"],"status":"published","title":"The implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass. For a...","description":"The implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass. For a successful attack, wpa_supplicant must be configured to not verify the network's TLS certificate during Phase 1 authentication, and an eap_peap_decrypt vulnerability can then be abused to skip Phase 2 authentication. The attack vector is sending an EAP-TLV Success packet instead of starting Phase 2. This allows an adversary to impersonate Enterprise Wi-Fi networks.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01177,"percentile":0.67848,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-287"],"published":"2024-02-16T09:52:46.398391Z","modified":"2026-10-31T15:02:25Z","exploits":[{"source":"pocgithub","id":"Helica-core/eap_pwn","title":"Helica-core/eap_pwn","date":"2024-02-26","url":"https://github.com/Helica-core/eap_pwn"}],"fixes":[{"ecosystem":"Alpine:v3.19","package":"wpa_supplicant","fixed_in":["2.10-r10"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"wpa_supplicant","fixed_in":["2.10-r11"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"wpa_supplicant","fixed_in":["2.10-r11"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"wpa_supplicant","fixed_in":["2.10-r11"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"wpa_supplicant","fixed_in":["2.10-r11"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"wpa_supplicant","fixed_in":["2.10-r11"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"wpa_supplicant","fixed_in":["1:2.10-5.el9"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"wpa_supplicant","fixed_in":["2.10-2"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"wpa_supplicant","fixed_in":["2.10-2"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"wpa_supplicant","fixed_in":["2.10-r11"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"wpa_supplicant","fixed_in":["1:2.10-4.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:7","package":"wpa_supplicant","fixed_in":["1:2.6-12.el7_9.2.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"wpa","fixed_in":["2:2.10-12+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"wpa","fixed_in":["2:2.10-21.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"wpa","fixed_in":["2:2.10-21.1"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"wpa","fixed_in":["2:2.7+git20190128+0c1e29f-6+deb10u4"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"wpa_supplicant","fixed_in":["2.10-3.1.mga9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"wpa_supplicant","fixed_in":["1:2.10-5.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"wpa_supplicant-debuginfo","fixed_in":["1:2.10-5.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"wpa_supplicant-debugsource","fixed_in":["1:2.10-5.el9"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"wpa_supplicant","fixed_in":["1:2.10-5.el9"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"wpa_supplicant","fixed_in":["2.10-150500.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"wpa_supplicant","fixed_in":["2.10-150500.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"wpa_supplicant","fixed_in":["2.10-150500.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"wpa_supplicant","fixed_in":["2.9-23.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"wpa_supplicant","fixed_in":["2.9-23.20.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"wpa_supplicant","fixed_in":["2.9-150000.4.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"wpa_supplicant","fixed_in":["2.9-150000.4.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"wpa_supplicant","fixed_in":["2.9-150000.4.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"wpa_supplicant","fixed_in":["2.9-150000.4.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"wpa_supplicant","fixed_in":["2.9-150000.4.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"wpa_supplicant","fixed_in":["2.9-150000.4.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"wpa_supplicant","fixed_in":["2.9-150000.4.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"wpa_supplicant","fixed_in":["2.9-150000.4.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"wpa_supplicant","fixed_in":["2.9-150000.4.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"wpa_supplicant","fixed_in":["2.9-150000.4.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"wpa_supplicant","fixed_in":["2.9-150000.4.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"wpa_supplicant","fixed_in":["2.9-150000.4.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.3","package":"wpa_supplicant","fixed_in":["2.9-150000.4.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.3","package":"wpa_supplicant","fixed_in":["2.9-150000.4.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"wpa_supplicant","fixed_in":["2.9-150000.4.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"wpa_supplicant","fixed_in":["2.9-150000.4.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"wpa_supplicant","fixed_in":["2.9-150000.4.39.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.3","package":"wpa_supplicant","fixed_in":["2.9-150000.4.39.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.4","package":"wpa_supplicant","fixed_in":["2.9-150000.4.39.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"wpa_supplicant","fixed_in":["2.10-150600.7.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"wpa_supplicant","fixed_in":["2.10-150600.7.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.0","package":"wpa_supplicant","fixed_in":["2.10-5.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"wpa_supplicant","fixed_in":["2.10-6.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.19","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-r10"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-r11"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-r11"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-r11"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-r11"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-r11"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.10-5.el9"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-2"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.10-r4"},{"fixed":"2.10-r11"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.10-4.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:7","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.6-12.el7_9.2.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.10-12+deb12u1"}]}],"versions":["2:2.10-12"]},{"source":"osv","ecosystem":"Debian:13","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.10-21.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.10-21.1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.7+git20190128+0c1e29f-6+deb10u4"}]}],"versions":["2:2.7+git20190128+0c1e29f-6","2:2.7+git20190128+0c1e29f-6+deb10u1","2:2.7+git20190128+0c1e29f-6+deb10u2","2:2.7+git20190128+0c1e29f-6+deb10u3"]},{"source":"osv","ecosystem":"Mageia:9","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-3.1.mga9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.10-5.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"wpa_supplicant-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.10-5.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"wpa_supplicant-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.10-5.el9"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.10-5.el9"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150500.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150500.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150500.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150500.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-23.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-23.20.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-150000.4.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-150000.4.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-150000.4.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-150000.4.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-150000.4.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-150000.4.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-150000.4.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-150000.4.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-150000.4.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-150000.4.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-150000.4.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-150000.4.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-150000.4.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-150000.4.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-150000.4.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-150000.4.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-150000.4.39.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-150000.4.39.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.4","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-150000.4.39.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150600.7.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150600.7.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-5.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.0-3ubuntu2","1.0-3ubuntu3","1.0-3ubuntu4","2.1-0ubuntu1","2.1-0ubuntu1.1","2.1-0ubuntu1.2","2.1-0ubuntu1.3","2.1-0ubuntu1.4","2.1-0ubuntu1.5","2.1-0ubuntu1.6","2.1-0ubuntu1.7","2.1-0ubuntu1.7+esm1","2.1-0ubuntu1.7+esm2","2.1-0ubuntu1.7+esm3","2.1-0ubuntu1.7+esm4","2.1-0ubuntu1.7+esm5"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4-0ubuntu3","2.4-0ubuntu4","2.4-0ubuntu5","2.4-0ubuntu6","2.4-0ubuntu6.2","2.4-0ubuntu6.3","2.4-0ubuntu6.4","2.4-0ubuntu6.5","2.4-0ubuntu6.6","2.4-0ubuntu6.7","2.4-0ubuntu6.8","2.4-0ubuntu6.8+esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4-0ubuntu10","2:2.4-1.1ubuntu1","2:2.6-15ubuntu1","2:2.6-15ubuntu2","2:2.6-15ubuntu2.1","2:2.6-15ubuntu2.2","2:2.6-15ubuntu2.3","2:2.6-15ubuntu2.4","2:2.6-15ubuntu2.5","2:2.6-15ubuntu2.6","2:2.6-15ubuntu2.7","2:2.6-15ubuntu2.8","2:2.6-15ubuntu2.8+esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:2.9-1ubuntu2","2:2.9-1ubuntu3","2:2.9-1ubuntu4","2:2.9-1ubuntu4.1","2:2.9-1ubuntu4.2","2:2.9-1ubuntu4.3","2:2.9-1ubuntu4.4","2:2.9-1ubuntu4.6"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:2.9.0-21build1","2:2.9.0-23","2:2.10-1","2:2.10-2","2:2.10-6","2:2.10-6ubuntu1","2:2.10-6ubuntu2","2:2.10-6ubuntu2.1","2:2.10-6ubuntu2.2","2:2.10-6ubuntu2.3","2:2.10-6ubuntu2.4"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:2.10-15","2:2.10-18","2:2.10-20","2:2.10-21","2:2.10-21build2","2:2.10-21build3","2:2.10-21build4","2:2.10-21ubuntu0.1","2:2.10-21ubuntu0.2","2:2.10-21ubuntu0.3","2:2.10-21ubuntu0.4"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:2.10-24","2:2.11-0ubuntu1","2:2.11-0ubuntu2","2:2.11-0ubuntu3","2:2.11-0ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:2.11-0ubuntu5","2:2.11-2ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"wpa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:2.11-0ubuntu4","2:2.11-0ubuntu5"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-6.1"}]}]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"w1.fi","product":"wpa_supplicant"}],"references":[{"url":"https://w1.fi/cgit/hostap/commit/?id=8e6485a1bcb0baffdea9e55255a81270b768439c","tags":["x_transferred","Patch","web","report"]},{"url":"https://www.top10vpn.com/research/wifi-vulnerabilities/","tags":["x_transferred","Third Party Advisory","web","article","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N46C4DTVUWK336OYDA4LGALSC5VVPTCC/","tags":["vendor-advisory","x_transferred","Mailing List","advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/02/msg00013.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QU6IR4KV3ZXJZLK2BY7HAHGZNCP7FPNI/","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QU6IR4KV3ZXJZLK2BY7HAHGZNCP7FPNI/","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N46C4DTVUWK336OYDA4LGALSC5VVPTCC/","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-52160","tags":["web","advisory"]},{"url":"https://www.top10vpn.com/research/wifi-vulnerabilities"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N46C4DTVUWK336OYDA4LGALSC5VVPTCC"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QU6IR4KV3ZXJZLK2BY7HAHGZNCP7FPNI"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N46C4DTVUWK336OYDA4LGALSC5VVPTCC"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QU6IR4KV3ZXJZLK2BY7HAHGZNCP7FPNI"},{"url":"https://github.com/advisories/GHSA-hj6q-jrf5-2pm3"},{"url":"https://security.alpinelinux.org/vuln/CVE-2023-52160","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2517","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-52160","tags":["report"]},{"url":"https://bugzilla.redhat.com/2264593","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-2517.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2023-52160","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1753802388.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1777476468.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52160.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-52160","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0053.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=32911","tags":["report"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2024\u0026m=slackware-security.383534","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.4_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2264593","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2517.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-52160","tags":["advisory","report"]},{"url":"https://errata.rockylinux.org/RLSA-2024:2517","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240764-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1219975","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52160","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240764-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240818-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240819-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243354-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520089-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-52160","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-52160","description":"The implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass. For a successful attack, wpa_supplicant must be configured to not verify the network's TLS certificate during Phase 1 authentication, and an eap_peap_decrypt vulnerability can then be abused to skip Phase 2 authentication. The attack vector is sending an EAP-TLV Success packet instead of starting Phase 2. This allows an adversary to impersonate Enterprise Wi-Fi networks.","status":"published","published":"2024-02-22T00:00:00Z","modified":"2025-11-04T18:21:38.414Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:35:18.508816Z"}],"euvd":[{"id":"EUVD-2023-56833","description":"The implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass. For a successful attack, wpa_supplicant must be configured to not verify the network's TLS certificate during Phase 1 authentication, and an eap_peap_decrypt vulnerability can then be abused to skip Phase 2 authentication. The attack vector is sending an EAP-TLV Success packet instead of starting Phase 2. This allows an adversary to impersonate Enterprise Wi-Fi networks.","status":"published","published":"2024-02-22T00:00:00Z","modified":"2025-11-04T18:21:38Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T19:49:24.151242Z"}],"ghsa":[{"id":"GHSA-hj6q-jrf5-2pm3","title":"The implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass. For a...","description":"The implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass. For a successful attack, wpa_supplicant must be configured to not verify the network's TLS certificate during Phase 1 authentication, and an eap_peap_decrypt vulnerability can then be abused to skip Phase 2 authentication. The attack vector is sending an EAP-TLV Success packet instead of starting Phase 2. This allows an adversary to impersonate Enterprise Wi-Fi networks.","status":"published","published":"2024-02-22T18:30:28Z","modified":"2025-11-04T21:31:12Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T15:04:36.536202Z"}],"nvd":[{"id":"CVE-2023-52160","description":"The implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass. For a successful attack, wpa_supplicant must be configured to not verify the network's TLS certificate during Phase 1 authentication, and an eap_peap_decrypt vulnerability can then be abused to skip Phase 2 authentication. The attack vector is sending an EAP-TLV Success packet instead of starting Phase 2. This allows an adversary to impersonate Enterprise Wi-Fi networks.","status":"published","published":"2024-02-22T17:15:08.263Z","modified":"2026-06-17T06:42:12.16Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:09:07.077422Z"}],"osv":[{"id":"ALPINE-CVE-2023-52160","description":"The implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass. For a successful attack, wpa_supplicant must be configured to not verify the network's TLS certificate during Phase 1 authentication, and an eap_peap_decrypt vulnerability can then be abused to skip Phase 2 authentication. The attack vector is sending an EAP-TLV Success packet instead of starting Phase 2. This allows an adversary to impersonate Enterprise Wi-Fi networks.","status":"published","published":"2024-02-22T17:15:08.263Z","modified":"2026-10-26T17:17:58.661340132Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:27:49.709457Z"},{"id":"AZL-35457","title":"CVE-2023-52160 affecting package wpa_supplicant for versions less than 2.10-2","description":"The implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass. For a successful attack, wpa_supplicant must be configured to not verify the network's TLS certificate during Phase 1 authentication, and an eap_peap_decrypt vulnerability can then be abused to skip Phase 2 authentication. The attack vector is sending an EAP-TLV Success packet instead of starting Phase 2. This allows an adversary to impersonate Enterprise Wi-Fi networks.","status":"published","published":"2024-02-22T17:15:08Z","modified":"2026-04-21T04:24:49.015426Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:04.173658Z"},{"id":"AZL-35483","title":"CVE-2023-52160 affecting package wpa_supplicant for versions less than 2.10-2","description":"The implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass. For a successful attack, wpa_supplicant must be configured to not verify the network's TLS certificate during Phase 1 authentication, and an eap_peap_decrypt vulnerability can then be abused to skip Phase 2 authentication. The attack vector is sending an EAP-TLV Success packet instead of starting Phase 2. This allows an adversary to impersonate Enterprise Wi-Fi networks.","status":"published","published":"2024-02-22T17:15:08Z","modified":"2026-10-31T15:02:25Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:04.173658Z"},{"id":"BELL-CVE-2023-52160","status":"published","published":"2024-02-16T09:52:46.398391Z","modified":"2026-01-26T09:36:48.148706Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:18.192656Z"},{"id":"CVE-2023-52160","description":"The implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass. For a successful attack, wpa_supplicant must be configured to not verify the network's TLS certificate during Phase 1 authentication, and an eap_peap_decrypt vulnerability can then be abused to skip Phase 2 authentication. The attack vector is sending an EAP-TLV Success packet instead of starting Phase 2. This allows an adversary to impersonate Enterprise Wi-Fi networks.","status":"published","published":"2024-02-22T00:00:00Z","modified":"2026-10-28T02:30:54.99231352Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:35.245372Z"},{"id":"DEBIAN-CVE-2023-52160","description":"The implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass. For a successful attack, wpa_supplicant must be configured to not verify the network's TLS certificate during Phase 1 authentication, and an eap_peap_decrypt vulnerability can then be abused to skip Phase 2 authentication. The attack vector is sending an EAP-TLV Success packet instead of starting Phase 2. This allows an adversary to impersonate Enterprise Wi-Fi networks.","status":"published","published":"2024-02-22T17:15:08.263Z","modified":"2026-10-26T18:03:07.935756706Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:40.586408Z"},{"id":"RHSA-2024:2517","title":"Red Hat Security Advisory: wpa_supplicant security update","status":"published","published":"2024-09-16T18:19:13Z","modified":"2026-03-18T11:33:44.954359Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"UBUNTU-CVE-2023-52160","description":"The implementation of PEAP in wpa_supplicant through 2.10 allows authentication bypass. For a successful attack, wpa_supplicant must be configured to not verify the network's TLS certificate during Phase 1 authentication, and an eap_peap_decrypt vulnerability can then be abused to skip Phase 2 authentication. The attack vector is sending an EAP-TLV Success packet instead of starting Phase 2. This allows an adversary to impersonate Enterprise Wi-Fi networks.","status":"published","published":"2024-02-22T17:15:00Z","modified":"2026-10-17T12:57:21.809054488Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T16:54:23.935133Z"},{"id":"ALSA-2024:2517","title":"Moderate: wpa_supplicant security update","description":"The wpa_supplicant packages contain an 802.1X Supplicant with support for WEP, WPA, WPA2 (IEEE 802.11i / RSN), and various EAP authentication methods. They implement key negotiation with a WPA Authenticator for client stations and controls the roaming and IEEE 802.11 authentication and association of the WLAN driver.\n\nSecurity Fix(es):\n\n* wpa_supplicant: potential authorization bypass (CVE-2023-52160)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2024-04-30T00:00:00Z","modified":"2026-10-29T11:31:43.663157545Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"CLSA-2025-1753802388","title":"wpa_supplicant: Fix of CVE-2023-52160","description":"- CVE-2023-52160: fix authentication bypass vulnerability by enforcing TLS\n  certificate verification and addressing eap_peap_decrypt vulnerability","status":"published","published":"2025-07-29T15:19:52Z","modified":"2026-06-01T00:30:47.253309904Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"CLSA-2026-1777476468","title":"wpa_supplicant: Fix of CVE-2023-52160","description":"- CVE-2023-52160: PEAP client: Update Phase 2 authentication\n  requirements","status":"published","published":"2026-04-29T15:27:55Z","modified":"2026-06-01T00:33:27.218510726Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"DLA-3743-1","title":"wpa - security update","status":"published","published":"2024-02-27T00:00:00Z","modified":"2026-03-09T01:20:06.684807Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"MGASA-2024-0053","title":"Updated wpa_supplicant packages fix security vulnerabilities","description":"The updated packages fix a security vulnerability:\nThe implementation of PEAP in wpa_supplicant through 2.10 allows\nauthentication bypass. For a successful attack, wpa_supplicant must be\nconfigured to not verify the network's TLS certificate during Phase 1\nauthentication, and an eap_peap_decrypt vulnerability can then be abused\nto skip Phase 2 authentication. The attack vector is sending an EAP-TLV\nSuccess packet instead of starting Phase 2. This allows an adversary to\nimpersonate Enterprise Wi-Fi networks.\n(CVE-2023-52160)\n","status":"published","published":"2024-03-06T16:53:33Z","modified":"2026-04-16T04:42:12.221200903Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:13694-1","title":"wpa_supplicant-2.10-6.1 on GA media","description":"These are all security issues fixed in the wpa_supplicant-2.10-6.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:01:21.820035Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"RLSA-2024:2517","title":"Moderate: wpa_supplicant security update","description":"The wpa_supplicant packages contain an 802.1X Supplicant with support for WEP, WPA, WPA2 (IEEE 802.11i / RSN), and various EAP authentication methods. They implement key negotiation with a WPA Authenticator for client stations and controls the roaming and IEEE 802.11 authentication and association of the WLAN driver.\n\nSecurity Fix(es):\n\n* wpa_supplicant: potential authorization bypass (CVE-2023-52160)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.","status":"published","published":"2024-05-10T14:32:36.204878Z","modified":"2026-02-05T11:00:04.23657Z","updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"SUSE-SU-2024:0764-1","title":"Security update for wpa_supplicant","description":"This update for wpa_supplicant fixes the following issues:\n\n- CVE-2023-52160: Bypassing WiFi Authentication (bsc#1219975).\n","status":"published","published":"2024-03-05T12:46:26Z","modified":"2026-02-04T03:18:25.553411Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0764-2","title":"Security update for wpa_supplicant","description":"This update for wpa_supplicant fixes the following issues:\n\n- CVE-2023-52160: Bypassing WiFi Authentication (bsc#1219975).\n","status":"published","published":"2024-03-05T12:46:33Z","modified":"2026-02-04T03:37:53.113494Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0818-1","title":"Security update for wpa_supplicant","description":"This update for wpa_supplicant fixes the following issues:\n\n- CVE-2023-52160: Bypassing WiFi Authentication (bsc#1219975).\n","status":"published","published":"2024-03-08T11:04:01Z","modified":"2026-02-04T04:04:15.077516Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:0819-1","title":"Security update for wpa_supplicant","description":"This update for wpa_supplicant fixes the following issues:\n\n- CVE-2023-52160: Bypassing WiFi Authentication (bsc#1219975).\n","status":"published","published":"2024-03-08T11:05:24Z","modified":"2025-05-02T04:35:50.345502Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:3354-1","title":"Security update for wpa_supplicant","description":"This update for wpa_supplicant fixes the following issues:\n\n- CVE-2023-52160: Bypassing WiFi Authentication (bsc#1219975).\n","status":"published","published":"2024-09-20T13:06:18Z","modified":"2026-02-04T03:17:28.762169Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"SUSE-SU-2025:20089-1","title":"Security update for wpa_supplicant","description":"This update for wpa_supplicant fixes the following issues:\n\n- CVE-2023-52160: Fixed WiFi authentication bypass (bsc#1219975).\n","status":"published","published":"2025-02-03T09:09:39Z","modified":"2026-03-23T04:47:07.889727Z","updated_at":"2026-11-02T15:53:59.381172Z"}]}}