NetworkManager 0.9.x does not pin a certificate's subject to an ESSID when 802.11X authentication is used.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade network-manager | Jul 30, 2024 | Jan 27, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 27, 2020 |
| Suse | — | Upgrade NetworkManager-glibUpgrade libnm-glib4-debuginfo-32bitUpgrade NetworkManager-gnomeUpgrade libgnome-control-center1Upgrade NetworkManager-gnome-langUpgrade NetworkManager-devel-32bitUpgrade libnm-util2-debuginfo-32bitUpgrade libnm-util2-debuginfoUpgrade networkmanagerUpgrade NetworkManager-gnome-debuginfoUpgrade libgnome-control-center1-debuginfoUpgrade networkmanager-langUpgrade libnm-glib4-debuginfoUpgrade wpa_supplicantUpgrade libnm-glib-vpn1-32bitUpgrade libnm-gtk-develUpgrade libnm-glib4-32bitUpgrade gnome-control-center-user-facesUpgrade NetworkManager-docUpgrade NetworkManager-debuginfoUpgrade libnm-util2Upgrade gnome-control-center-debugsourceUpgrade libnm-glib-vpn1-debuginfo-32bitUpgrade wpa_supplicant-guiUpgrade gnome-control-center-langUpgrade libnm-glib-vpn1-debuginfoUpgrade libnm-glib-vpn1Upgrade libnm-util2-32bitUpgrade gnome-control-center-branding-upstreamUpgrade gnome-control-center-develUpgrade NetworkManager-gnome-debugsourceUpgrade NetworkManager-debugsourceUpgrade wpa_supplicant-debuginfoUpgrade gnome-control-centerUpgrade libnm-gtk0Upgrade networkmanager-develUpgrade wpa_supplicant-debugsourceUpgrade gnome-control-center-debuginfoUpgrade wpa_supplicant-gui-debuginfoUpgrade libnm-gtk0-debuginfoUpgrade libnm-glib4 | Feb 17, 2015 | Feb 17, 2015 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub