NetworkManager (NM) 0.7.2 does not ensure that the configured Certification Authority (CA) certificate file for a (1) WPA Enterprise or (2) 802.1x network remains present upon a connection attempt, which might allow remote attackers to obtain sensitive information or cause a denial of service (connectivity disruption) by spoofing the identity of a wireless network.
CVSS Details
- CVSS 3.1 Base Score: 5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade NetworkManager-gnomeUpgrade NetworkManager-develUpgrade NetworkManagerUpgrade NetworkManager-glibUpgrade NetworkManager-glib-devel | Dec 1, 2016 | Dec 23, 2009 |
| Debian | — | Upgrade network-manager-applet | Jul 30, 2024 | Dec 23, 2009 |
| Oracle_linux | — | Upgrade NetworkManager-glib-develUpgrade NetworkManager-gnomeUpgrade NetworkManager-glibUpgrade NetworkManager-develUpgrade NetworkManager | Oct 16, 2024 | Dec 23, 2009 |
| Suse | — | Upgrade NetworkManager-gnome | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade network-manager-gnome | Nov 8, 2024 | Dec 23, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub