It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.phase2-ca-path settings, when creating a new profile. When a user connects to a network using this profile, the authentication does not happen and the connection is made insecurely.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade NetworkManager-libnm-develUpgrade NetworkManager-debuginfoUpgrade NetworkManager-tuiUpgrade NetworkManager-bluetoothUpgrade NetworkManagerUpgrade NetworkManager-config-serverUpgrade NetworkManager-wifiUpgrade NetworkManager-pppUpgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManager-wwanUpgrade NetworkManager-glibUpgrade NetworkManager-glib-develUpgrade NetworkManager-teamUpgrade NetworkManager-libnmUpgrade NetworkManager-adsl | Oct 28, 2020 | Jun 8, 2020 |
| Centos_linux | — | Upgrade NetworkManager-bluetoothUpgrade NetworkManager-wifiUpgrade NetworkManagerUpgrade NetworkManager-glib-develUpgrade NetworkManager-tuiUpgrade NetworkManager-team-debuginfoUpgrade NetworkManager-ovs-debuginfoUpgrade NetworkManager-bluetooth-debuginfoUpgrade NetworkManager-config-serverUpgrade NetworkManager-libnmUpgrade NetworkManager-pppUpgrade NetworkManager-wifi-debuginfoUpgrade NetworkManager-adslUpgrade NetworkManager-glibUpgrade NetworkManager-cloud-setup-debuginfoUpgrade NetworkManager-config-connectivity-centosUpgrade NetworkManager-ppp-debuginfoUpgrade NetworkManager-libnm-develUpgrade NetworkManager-debuginfoUpgrade NetworkManager-libnm-debuginfoUpgrade NetworkManager-tui-debuginfoUpgrade NetworkManager-wwan-debuginfoUpgrade NetworkManager-debugsourceUpgrade NetworkManager-adsl-debuginfoUpgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManager-teamUpgrade NetworkManager-cloud-setupUpgrade NetworkManager-ovsUpgrade NetworkManager-wwan | Jul 28, 2020 | Jun 8, 2020 |
| Debian | — | Upgrade network-manager | Jul 30, 2024 | Jun 8, 2020 |
| Huawei Euleros 2_0_sp8 | — | — | Dec 15, 2020 | Jun 8, 2020 |
| Huawei Euleros 2_0_sp9 | — | — | Dec 1, 2020 | Jun 8, 2020 |
| Oracle_linux | — | Upgrade NetworkManager-ovsUpgrade NetworkManager-libnm-develUpgrade NetworkManager-config-serverUpgrade NetworkManager-wifiUpgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManager-wwanUpgrade NetworkManager-cloud-setupUpgrade NetworkManager-pppUpgrade NetworkManager-teamUpgrade NetworkManager-glib-develUpgrade NetworkManager-bluetoothUpgrade NetworkManager-adslUpgrade NetworkManager-libnmUpgrade NetworkManagerUpgrade NetworkManager-tuiUpgrade NetworkManager-glibUpgrade NetworkManager-config-connectivity-redhat | Jul 25, 2020 | May 29, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Jun 8, 2020 |
| Redhat_linux | — | No solution existsUpgrade NetworkManager-bluetooth-debuginfoUpgrade NetworkManager-glibUpgrade NetworkManager-wifiUpgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManager-cloud-setupUpgrade NetworkManager-pppUpgrade NetworkManager-wwanUpgrade NetworkManager-debuginfoUpgrade NetworkManager-libnm-develUpgrade NetworkManager-adsl-debuginfoUpgrade NetworkManager-tui-debuginfoUpgrade NetworkManager-bluetoothUpgrade NetworkManager-wwan-debuginfoUpgrade NetworkManager-team-debuginfoUpgrade NetworkManager-ppp-debuginfoUpgrade NetworkManager-teamUpgrade NetworkManager-config-connectivity-redhatUpgrade NetworkManager-ovs-debuginfoUpgrade NetworkManager-config-serverUpgrade NetworkManager-glib-develUpgrade NetworkManager-libnm-debuginfoUpgrade NetworkManagerUpgrade NetworkManager-cloud-setup-debuginfoUpgrade NetworkManager-ovsUpgrade NetworkManager-libnmUpgrade NetworkManager-adslUpgrade NetworkManager-debugsourceUpgrade NetworkManager-wifi-debuginfoUpgrade NetworkManager-tui | Jul 28, 2020 | Jun 8, 2020 |
| Suse | — | Upgrade NetworkManager-develUpgrade NetworkManagerUpgrade typelib-1_0-NM-1_0Upgrade NetworkManager-langUpgrade libnm0 | Aug 9, 2024 | Jun 8, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub