NetworkManager 0.9.x does not pin a certificate's subject to an ESSID when 802.11X authentication is used.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade network-manager | Jul 30, 2024 | Jan 27, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 27, 2020 |
| Suse | — | Upgrade libnm-glib4-32bitUpgrade gnome-control-center-user-facesUpgrade libnm-glib4-debuginfo-32bitUpgrade NetworkManager-gnome-debuginfoUpgrade NetworkManager-docUpgrade NetworkManager-debuginfoUpgrade libnm-glib-vpn1-32bitUpgrade networkmanager-langUpgrade libnm-util2-debuginfoUpgrade NetworkManager-gnome-langUpgrade NetworkManager-devel-32bitUpgrade libnm-glib4-debuginfoUpgrade libnm-util2Upgrade gnome-control-center-debugsourceUpgrade NetworkManager-gnomeUpgrade libgnome-control-center1Upgrade NetworkManager-glibUpgrade networkmanagerUpgrade libnm-util2-debuginfo-32bitUpgrade wpa_supplicantUpgrade libgnome-control-center1-debuginfoUpgrade libnm-gtk-develUpgrade networkmanager-develUpgrade wpa_supplicant-debuginfoUpgrade NetworkManager-debugsourceUpgrade libnm-glib-vpn1Upgrade libnm-gtk0-debuginfoUpgrade gnome-control-centerUpgrade NetworkManager-gnome-debugsourceUpgrade gnome-control-center-langUpgrade wpa_supplicant-debugsourceUpgrade libnm-glib4Upgrade wpa_supplicant-gui-debuginfoUpgrade gnome-control-center-debuginfoUpgrade gnome-control-center-develUpgrade libnm-gtk0Upgrade gnome-control-center-branding-upstreamUpgrade libnm-glib-vpn1-debuginfoUpgrade libnm-glib-vpn1-debuginfo-32bitUpgrade wpa_supplicant-guiUpgrade libnm-util2-32bit | Feb 17, 2015 | Feb 17, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub