It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.phase2-ca-path settings, when creating a new profile. When a user connects to a network using this profile, the authentication does not happen and the connection is made insecurely.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade NetworkManager-wifiUpgrade NetworkManager-bluetoothUpgrade NetworkManager-tuiUpgrade NetworkManager-libnm-develUpgrade NetworkManager-config-serverUpgrade NetworkManagerUpgrade NetworkManager-debuginfoUpgrade NetworkManager-pppUpgrade NetworkManager-glib-develUpgrade NetworkManager-libnmUpgrade NetworkManager-glibUpgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManager-wwanUpgrade NetworkManager-teamUpgrade NetworkManager-adsl | Oct 28, 2020 | Jun 8, 2020 |
| Centos_linux | — | Upgrade NetworkManager-glib-develUpgrade NetworkManager-wifiUpgrade NetworkManager-pppUpgrade NetworkManager-libnmUpgrade NetworkManager-bluetoothUpgrade NetworkManager-adslUpgrade NetworkManager-ovs-debuginfoUpgrade NetworkManager-glibUpgrade NetworkManager-config-serverUpgrade NetworkManager-team-debuginfoUpgrade NetworkManager-bluetooth-debuginfoUpgrade NetworkManagerUpgrade NetworkManager-tuiUpgrade NetworkManager-wifi-debuginfoUpgrade NetworkManager-tui-debuginfoUpgrade NetworkManager-wwanUpgrade NetworkManager-wwan-debuginfoUpgrade NetworkManager-libnm-debuginfoUpgrade NetworkManager-teamUpgrade NetworkManager-cloud-setupUpgrade NetworkManager-libnm-develUpgrade NetworkManager-config-connectivity-centosUpgrade NetworkManager-ppp-debuginfoUpgrade NetworkManager-ovsUpgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManager-debuginfoUpgrade NetworkManager-cloud-setup-debuginfoUpgrade NetworkManager-adsl-debuginfoUpgrade NetworkManager-debugsource | Jul 28, 2020 | Jun 8, 2020 |
| Debian | — | Upgrade network-manager | Jul 30, 2024 | Jun 8, 2020 |
| Huawei Euleros 2_0_sp8 | — | — | Dec 15, 2020 | Jun 8, 2020 |
| Huawei Euleros 2_0_sp9 | — | — | Dec 1, 2020 | Jun 8, 2020 |
| Oracle_linux | — | Upgrade NetworkManager-ovsUpgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManager-pppUpgrade NetworkManager-wwanUpgrade NetworkManager-teamUpgrade NetworkManager-cloud-setupUpgrade NetworkManager-config-serverUpgrade NetworkManager-wifiUpgrade NetworkManager-libnm-develUpgrade NetworkManager-glib-develUpgrade NetworkManager-adslUpgrade NetworkManagerUpgrade NetworkManager-tuiUpgrade NetworkManager-glibUpgrade NetworkManager-libnmUpgrade NetworkManager-config-connectivity-redhatUpgrade NetworkManager-bluetooth | Jul 25, 2020 | May 29, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Jun 8, 2020 |
| Redhat_linux | — | Upgrade NetworkManager-cloud-setupUpgrade NetworkManager-bluetoothUpgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManager-ppp-debuginfoUpgrade NetworkManager-wifiUpgrade NetworkManager-debuginfoUpgrade NetworkManager-pppUpgrade NetworkManager-wwan-debuginfoUpgrade NetworkManager-bluetooth-debuginfoNo solution existsUpgrade NetworkManager-glibUpgrade NetworkManager-tui-debuginfoUpgrade NetworkManager-libnm-develUpgrade NetworkManager-wwanUpgrade NetworkManager-adsl-debuginfoUpgrade NetworkManager-team-debuginfoUpgrade NetworkManager-debugsourceUpgrade NetworkManager-ovsUpgrade NetworkManager-glib-develUpgrade NetworkManager-cloud-setup-debuginfoUpgrade NetworkManager-tuiUpgrade NetworkManager-ovs-debuginfoUpgrade NetworkManager-libnmUpgrade NetworkManagerUpgrade NetworkManager-teamUpgrade NetworkManager-adslUpgrade NetworkManager-wifi-debuginfoUpgrade NetworkManager-libnm-debuginfoUpgrade NetworkManager-config-connectivity-redhatUpgrade NetworkManager-config-server | Jul 28, 2020 | Jun 8, 2020 |
| Suse | — | Upgrade networkmanager-langUpgrade libnm0Upgrade networkmanagerUpgrade networkmanager-develUpgrade typelib-1_0-nm-1_0 | Aug 9, 2024 | Jun 8, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub