nm-applet.conf in GNOME NetworkManager before 0.7.0.99 contains an incorrect deny setting, which allows local users to discover (1) network connection passwords and (2) pre-shared keys via calls to the GetSecrets method in the dbus request handler.
CVSS Details
- CVSS 3.1 Base Score: 5.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade NetworkManagerUpgrade NetworkManager-glibUpgrade NetworkManager-develUpgrade NetworkManager-gnomeUpgrade NetworkManager-glib-devel | Dec 1, 2016 | Mar 4, 2009 |
| Debian | — | Upgrade network-manager-appletUpgrade network-manager | Jul 30, 2024 | Mar 5, 2009 |
| Oracle_linux | — | Upgrade NetworkManager-glib-develUpgrade NetworkManager-gnomeUpgrade NetworkManager-develUpgrade NetworkManagerUpgrade NetworkManager-glib | Oct 16, 2024 | Mar 5, 2009 |
| Suse | — | Upgrade NetworkManager-develUpgrade NetworkManager-glibUpgrade NetworkManager-gnomeUpgrade NetworkManager | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade network-managerUpgrade network-manager-gnome | Nov 8, 2024 | Mar 5, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub