nm-connection-editor in NetworkManager (NM) 0.7.x exports connection objects over D-Bus upon actions in the connection editor GUI, which allows local users to obtain sensitive information by reading D-Bus signals, as demonstrated by using dbus-monitor to discover the password for the WiFi network.
CVSS Details
- CVSS 3.1 Base Score: 3.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade NetworkManagerUpgrade NetworkManager-glibUpgrade NetworkManager-develUpgrade NetworkManager-gnomeUpgrade NetworkManager-glib-devel | Dec 1, 2016 | Dec 23, 2009 |
| Debian | — | Upgrade network-manager-applet | Jul 30, 2024 | Dec 23, 2009 |
| Oracle_linux | — | Upgrade NetworkManager-develUpgrade NetworkManager-gnomeUpgrade NetworkManager-glibUpgrade NetworkManagerUpgrade NetworkManager-glib-devel | Oct 16, 2024 | Dec 23, 2009 |
| Suse | — | Upgrade NetworkManager-gnome | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade network-manager-gnome | Nov 8, 2024 | Dec 23, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub