It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.phase2-ca-path settings, when creating a new profile. When a user connects to a network using this profile, the authentication does not happen and the connection is made insecurely.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade NetworkManager-wifiUpgrade NetworkManager-bluetoothUpgrade NetworkManager-tuiUpgrade NetworkManagerUpgrade NetworkManager-config-serverUpgrade NetworkManager-pppUpgrade NetworkManager-libnm-develUpgrade NetworkManager-debuginfoUpgrade NetworkManager-adslUpgrade NetworkManager-teamUpgrade NetworkManager-glib-develUpgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManager-wwanUpgrade NetworkManager-glibUpgrade NetworkManager-libnm | Oct 28, 2020 | Jun 8, 2020 |
| Centos_linux | — | Upgrade NetworkManager-wwanUpgrade NetworkManager-ppp-debuginfoUpgrade NetworkManager-tui-debuginfoUpgrade NetworkManager-teamUpgrade NetworkManager-cloud-setup-debuginfoUpgrade NetworkManager-libnm-debuginfoUpgrade NetworkManager-debuginfoUpgrade NetworkManager-libnm-develUpgrade NetworkManager-ovsUpgrade NetworkManager-cloud-setupUpgrade NetworkManager-config-connectivity-centosUpgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManager-adsl-debuginfoUpgrade NetworkManager-debugsourceUpgrade NetworkManager-wwan-debuginfoUpgrade NetworkManager-libnmUpgrade NetworkManager-glibUpgrade NetworkManager-bluetoothUpgrade NetworkManager-wifiUpgrade NetworkManager-tuiUpgrade NetworkManagerUpgrade NetworkManager-bluetooth-debuginfoUpgrade NetworkManager-config-serverUpgrade NetworkManager-wifi-debuginfoUpgrade NetworkManager-adslUpgrade NetworkManager-pppUpgrade NetworkManager-team-debuginfoUpgrade NetworkManager-ovs-debuginfoUpgrade NetworkManager-glib-devel | Jul 28, 2020 | Jun 8, 2020 |
| Debian | — | Upgrade network-manager | Jul 30, 2024 | Jun 8, 2020 |
| Huawei Euleros 2_0_sp8 | — | — | Dec 15, 2020 | Jun 8, 2020 |
| Huawei Euleros 2_0_sp9 | — | — | Dec 1, 2020 | Jun 8, 2020 |
| Oracle_linux | — | Upgrade NetworkManager-libnm-develUpgrade NetworkManager-teamUpgrade NetworkManager-ovsUpgrade NetworkManager-glib-develUpgrade NetworkManager-pppUpgrade NetworkManager-wwanUpgrade NetworkManager-config-serverUpgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManager-wifiUpgrade NetworkManager-cloud-setupUpgrade NetworkManager-config-connectivity-redhatUpgrade NetworkManagerUpgrade NetworkManager-libnmUpgrade NetworkManager-bluetoothUpgrade NetworkManager-adslUpgrade NetworkManager-tuiUpgrade NetworkManager-glib | Jul 25, 2020 | May 29, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Jun 8, 2020 |
| Redhat_linux | — | Upgrade NetworkManager-bluetooth-debuginfoUpgrade NetworkManager-glibUpgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManager-wwan-debuginfoUpgrade NetworkManager-wifiUpgrade NetworkManager-pppUpgrade NetworkManager-wwanUpgrade NetworkManager-cloud-setupUpgrade NetworkManager-libnm-develUpgrade NetworkManager-adsl-debuginfoUpgrade NetworkManager-bluetoothUpgrade NetworkManager-debuginfoUpgrade NetworkManager-ppp-debuginfoUpgrade NetworkManager-tui-debuginfoNo solution existsUpgrade NetworkManager-team-debuginfoUpgrade NetworkManager-glib-develUpgrade NetworkManager-ovsUpgrade NetworkManager-debugsourceUpgrade NetworkManager-libnm-debuginfoUpgrade NetworkManager-config-serverUpgrade NetworkManager-adslUpgrade NetworkManagerUpgrade NetworkManager-libnmUpgrade NetworkManager-wifi-debuginfoUpgrade NetworkManager-config-connectivity-redhatUpgrade NetworkManager-tuiUpgrade NetworkManager-cloud-setup-debuginfoUpgrade NetworkManager-ovs-debuginfoUpgrade NetworkManager-team | Jul 28, 2020 | Jun 8, 2020 |
| Suse | — | Upgrade NetworkManager-develUpgrade NetworkManagerUpgrade libnm0Upgrade NetworkManager-langUpgrade typelib-1_0-NM-1_0 | Aug 9, 2024 | Jun 8, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub