It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.phase2-ca-path settings, when creating a new profile. When a user connects to a network using this profile, the authentication does not happen and the connection is made insecurely.
CVSS Details
- CVSS 3.1 Base Score: 4.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade NetworkManager-teamUpgrade NetworkManager-adslUpgrade NetworkManager-glib-develUpgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManager-wwanUpgrade NetworkManager-glibUpgrade NetworkManager-libnmUpgrade NetworkManager-wifiUpgrade NetworkManager-config-serverUpgrade NetworkManager-libnm-develUpgrade NetworkManagerUpgrade NetworkManager-bluetoothUpgrade NetworkManager-pppUpgrade NetworkManager-tuiUpgrade NetworkManager-debuginfo | Oct 28, 2020 | Jun 8, 2020 |
| Centos_linux | — | Upgrade NetworkManager-tuiUpgrade NetworkManager-wifiUpgrade NetworkManager-bluetoothUpgrade NetworkManager-glibUpgrade NetworkManager-ovs-debuginfoUpgrade NetworkManager-adslUpgrade NetworkManagerUpgrade NetworkManager-glib-develUpgrade NetworkManager-team-debuginfoUpgrade NetworkManager-wifi-debuginfoUpgrade NetworkManager-pppUpgrade NetworkManager-libnmUpgrade NetworkManager-config-serverUpgrade NetworkManager-bluetooth-debuginfoUpgrade NetworkManager-teamUpgrade NetworkManager-config-connectivity-centosUpgrade NetworkManager-libnm-develUpgrade NetworkManager-ovsUpgrade NetworkManager-wwan-debuginfoUpgrade NetworkManager-tui-debuginfoUpgrade NetworkManager-debuginfoUpgrade NetworkManager-debugsourceUpgrade NetworkManager-adsl-debuginfoUpgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManager-ppp-debuginfoUpgrade NetworkManager-wwanUpgrade NetworkManager-libnm-debuginfoUpgrade NetworkManager-cloud-setup-debuginfoUpgrade NetworkManager-cloud-setup | Jul 28, 2020 | Jun 8, 2020 |
| Debian | — | Upgrade network-manager | Jul 30, 2024 | Jun 8, 2020 |
| Huawei Euleros 2_0_sp8 | — | — | Dec 15, 2020 | Jun 8, 2020 |
| Huawei Euleros 2_0_sp9 | — | — | Dec 1, 2020 | Jun 8, 2020 |
| Oracle_linux | — | Upgrade NetworkManager-libnm-develUpgrade NetworkManager-glib-develUpgrade NetworkManager-config-serverUpgrade NetworkManager-teamUpgrade NetworkManager-wifiUpgrade NetworkManager-ovsUpgrade NetworkManager-pppUpgrade NetworkManager-wwanUpgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManager-cloud-setupUpgrade NetworkManager-tuiUpgrade NetworkManagerUpgrade NetworkManager-config-connectivity-redhatUpgrade NetworkManager-bluetoothUpgrade NetworkManager-adslUpgrade NetworkManager-libnmUpgrade NetworkManager-glib | Jul 25, 2020 | May 29, 2020 |
| Redhat Openshift | — | Upgrade redhat-coreos | Dec 29, 2020 | Jun 8, 2020 |
| Redhat_linux | — | Upgrade NetworkManager-debuginfoUpgrade NetworkManager-wwan-debuginfoUpgrade NetworkManager-wifiUpgrade NetworkManager-wwanUpgrade NetworkManager-cloud-setupNo solution existsUpgrade NetworkManager-adsl-debuginfoUpgrade NetworkManager-bluetooth-debuginfoUpgrade NetworkManager-bluetoothUpgrade NetworkManager-team-debuginfoUpgrade NetworkManager-pppUpgrade NetworkManager-libnm-develUpgrade NetworkManager-ppp-debuginfoUpgrade NetworkManager-tui-debuginfoUpgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManager-glibUpgrade NetworkManager-ovsUpgrade NetworkManager-tuiUpgrade NetworkManager-libnmUpgrade NetworkManager-wifi-debuginfoUpgrade NetworkManagerUpgrade NetworkManager-cloud-setup-debuginfoUpgrade NetworkManager-config-connectivity-redhatUpgrade NetworkManager-libnm-debuginfoUpgrade NetworkManager-teamUpgrade NetworkManager-config-serverUpgrade NetworkManager-debugsourceUpgrade NetworkManager-ovs-debuginfoUpgrade NetworkManager-glib-develUpgrade NetworkManager-adsl | Jul 28, 2020 | Jun 8, 2020 |
| Suse | — | Upgrade libnm0Upgrade networkmanager-langUpgrade networkmanager-develUpgrade networkmanagerUpgrade typelib-1_0-nm-1_0 | Aug 9, 2024 | Jun 8, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub