It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.phase2-ca-path settings, when creating a new profile. When a user connects to a network using this profile, the authentication does not happen and the connection is made insecurely.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManager-wwanUpgrade NetworkManager-teamUpgrade NetworkManager-libnmUpgrade NetworkManager-glib-develUpgrade NetworkManager-adslUpgrade NetworkManager-glibUpgrade NetworkManager-config-serverUpgrade NetworkManager-debuginfoUpgrade NetworkManager-bluetoothUpgrade NetworkManager-wifiUpgrade NetworkManager-pppUpgrade NetworkManager-libnm-develUpgrade NetworkManager-tuiUpgrade NetworkManager | Oct 28, 2020 | Jun 8, 2020 |
| Centos_linux | — | Upgrade NetworkManager-tui-debuginfoUpgrade NetworkManager-libnm-debuginfoUpgrade NetworkManager-debugsourceUpgrade NetworkManager-adsl-debuginfoUpgrade NetworkManager-teamUpgrade NetworkManager-wwan-debuginfoUpgrade NetworkManager-cloud-setup-debuginfoUpgrade NetworkManager-debuginfoUpgrade NetworkManager-wwanUpgrade NetworkManager-ppp-debuginfoUpgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManager-config-connectivity-centosUpgrade NetworkManager-cloud-setupUpgrade NetworkManager-ovsUpgrade NetworkManager-libnm-develUpgrade NetworkManagerUpgrade NetworkManager-bluetoothUpgrade NetworkManager-bluetooth-debuginfoUpgrade NetworkManager-pppUpgrade NetworkManager-glibUpgrade NetworkManager-adslUpgrade NetworkManager-tuiUpgrade NetworkManager-ovs-debuginfoUpgrade NetworkManager-team-debuginfoUpgrade NetworkManager-glib-develUpgrade NetworkManager-config-serverUpgrade NetworkManager-wifiUpgrade NetworkManager-wifi-debuginfoUpgrade NetworkManager-libnm | Jul 28, 2020 | Jun 8, 2020 |
| Debian | — | Upgrade network-manager | Jul 30, 2024 | Jun 8, 2020 |
| Huawei Euleros 2_0_sp8 | — | — | Dec 15, 2020 | Jun 8, 2020 |
| Huawei Euleros 2_0_sp9 | — | — | Dec 1, 2020 | Jun 8, 2020 |
| Oracle_linux | — | Upgrade NetworkManager-glib-develUpgrade NetworkManager-teamUpgrade NetworkManager-config-serverUpgrade NetworkManager-cloud-setupUpgrade NetworkManager-libnm-develUpgrade NetworkManager-ovsUpgrade NetworkManager-wwanUpgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManager-wifiUpgrade NetworkManager-pppUpgrade NetworkManager-libnmUpgrade NetworkManagerUpgrade NetworkManager-glibUpgrade NetworkManager-bluetoothUpgrade NetworkManager-adslUpgrade NetworkManager-config-connectivity-redhatUpgrade NetworkManager-tui | Jul 25, 2020 | May 29, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Jun 8, 2020 |
| Redhat_linux | — | Upgrade NetworkManager-debuginfoUpgrade NetworkManager-libnm-develNo solution existsUpgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManager-pppUpgrade NetworkManager-wifiUpgrade NetworkManager-adsl-debuginfoUpgrade NetworkManager-bluetoothUpgrade NetworkManager-bluetooth-debuginfoUpgrade NetworkManager-cloud-setupUpgrade NetworkManager-wwanUpgrade NetworkManager-glibUpgrade NetworkManager-tui-debuginfoUpgrade NetworkManager-ppp-debuginfoUpgrade NetworkManager-wwan-debuginfoUpgrade NetworkManager-team-debuginfoUpgrade NetworkManager-ovs-debuginfoUpgrade NetworkManager-tuiUpgrade NetworkManagerUpgrade NetworkManager-libnmUpgrade NetworkManager-cloud-setup-debuginfoUpgrade NetworkManager-wifi-debuginfoUpgrade NetworkManager-debugsourceUpgrade NetworkManager-glib-develUpgrade NetworkManager-config-serverUpgrade NetworkManager-ovsUpgrade NetworkManager-config-connectivity-redhatUpgrade NetworkManager-teamUpgrade NetworkManager-libnm-debuginfoUpgrade NetworkManager-adsl | Jul 28, 2020 | Jun 8, 2020 |
| Suse | — | Upgrade libnm0Upgrade NetworkManager-langUpgrade typelib-1_0-NM-1_0Upgrade NetworkManager-develUpgrade NetworkManager | Aug 9, 2024 | Jun 8, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub