It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.phase2-ca-path settings, when creating a new profile. When a user connects to a network using this profile, the authentication does not happen and the connection is made insecurely.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade NetworkManager-pppUpgrade NetworkManagerUpgrade NetworkManager-tuiUpgrade NetworkManager-bluetoothUpgrade NetworkManager-debuginfoUpgrade NetworkManager-libnm-develUpgrade NetworkManager-wifiUpgrade NetworkManager-config-serverUpgrade NetworkManager-adslUpgrade NetworkManager-teamUpgrade NetworkManager-wwanUpgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManager-glib-develUpgrade NetworkManager-glibUpgrade NetworkManager-libnm | Oct 28, 2020 | Jun 8, 2020 |
| Centos_linux | — | Upgrade NetworkManager-ppp-debuginfoUpgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManager-wwan-debuginfoUpgrade NetworkManager-libnm-debuginfoUpgrade NetworkManager-tui-debuginfoUpgrade NetworkManager-teamUpgrade NetworkManager-wwanUpgrade NetworkManager-cloud-setupUpgrade NetworkManager-ovsUpgrade NetworkManager-debuginfoUpgrade NetworkManager-adsl-debuginfoUpgrade NetworkManager-config-connectivity-centosUpgrade NetworkManager-debugsourceUpgrade NetworkManager-cloud-setup-debuginfoUpgrade NetworkManager-libnm-develUpgrade NetworkManager-pppUpgrade NetworkManager-team-debuginfoUpgrade NetworkManager-bluetoothUpgrade NetworkManager-wifiUpgrade NetworkManagerUpgrade NetworkManager-glibUpgrade NetworkManager-adslUpgrade NetworkManager-wifi-debuginfoUpgrade NetworkManager-glib-develUpgrade NetworkManager-ovs-debuginfoUpgrade NetworkManager-libnmUpgrade NetworkManager-config-serverUpgrade NetworkManager-tuiUpgrade NetworkManager-bluetooth-debuginfo | Jul 28, 2020 | Jun 8, 2020 |
| Debian | — | Upgrade network-manager | Jul 30, 2024 | Jun 8, 2020 |
| Huawei Euleros 2_0_sp8 | — | — | Dec 15, 2020 | Jun 8, 2020 |
| Huawei Euleros 2_0_sp9 | — | — | Dec 1, 2020 | Jun 8, 2020 |
| Oracle_linux | — | Upgrade NetworkManager-wifiUpgrade NetworkManager-cloud-setupUpgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManager-pppUpgrade NetworkManager-config-serverUpgrade NetworkManager-teamUpgrade NetworkManager-wwanUpgrade NetworkManager-libnm-develUpgrade NetworkManager-glib-develUpgrade NetworkManager-ovsUpgrade NetworkManager-config-connectivity-redhatUpgrade NetworkManagerUpgrade NetworkManager-tuiUpgrade NetworkManager-bluetoothUpgrade NetworkManager-adslUpgrade NetworkManager-glibUpgrade NetworkManager-libnm | Jul 25, 2020 | May 29, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Jun 8, 2020 |
| Redhat_linux | — | Upgrade NetworkManager-libnmUpgrade NetworkManager-ovsUpgrade NetworkManager-glib-develUpgrade NetworkManager-adslUpgrade NetworkManager-libnm-debuginfoUpgrade NetworkManager-ovs-debuginfoUpgrade NetworkManager-teamUpgrade NetworkManagerUpgrade NetworkManager-tuiUpgrade NetworkManager-config-serverUpgrade NetworkManager-debugsourceUpgrade NetworkManager-config-connectivity-redhatUpgrade NetworkManager-wifi-debuginfoUpgrade NetworkManager-cloud-setup-debuginfoUpgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManager-team-debuginfoUpgrade NetworkManager-bluetoothUpgrade NetworkManager-cloud-setupUpgrade NetworkManager-wwanUpgrade NetworkManager-ppp-debuginfoUpgrade NetworkManager-tui-debuginfoUpgrade NetworkManager-bluetooth-debuginfoUpgrade NetworkManager-wifiUpgrade NetworkManager-adsl-debuginfoUpgrade NetworkManager-pppUpgrade NetworkManager-debuginfoUpgrade NetworkManager-wwan-debuginfoUpgrade NetworkManager-glibNo solution existsUpgrade NetworkManager-libnm-devel | Jul 28, 2020 | Jun 8, 2020 |
| Suse | — | Upgrade typelib-1_0-nm-1_0Upgrade networkmanager-develUpgrade networkmanager-langUpgrade libnm0Upgrade networkmanager | Aug 9, 2024 | Jun 8, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub