4
CVSSv2

CVE-2020-10754

Published: 08/06/2020 Updated: 07/11/2023
CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8
CVSS v3 Base Score: 4.3 | Impact Score: 1.4 | Exploitability Score: 2.8
VMScore: 356
Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N

Vulnerability Summary

It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.phase2-ca-path settings, when creating a new profile. When a user connects to a network using this profile, the authentication does not happen and the connection is made insecurely.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

gnome networkmanager

fedoraproject fedora 31

Vendor Advisories

Synopsis Moderate: NetworkManager security and bug fix update Type/Severity Security Advisory: Moderate Topic An update for NetworkManager is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring Sy ...
Synopsis Moderate: NetworkManager security and bug fix update Type/Severity Security Advisory: Moderate Topic An update for NetworkManager is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring Sy ...
Synopsis Important: Container-native Virtualization security, bug fix, and enhancement update Type/Severity Security Advisory: Important Topic Red Hat OpenShift Virtualization release 240 is now available with updates to packages and images that fix several bugs and add enhancementsRed Hat Product Securi ...
A flaw was found in nmcli, where the command-line interface to the NetworkManager did not accept the 802-1xca-path and 802-1xphase2-ca-path settings when creating a new profile When a user connects to a network using this profile, the authentication does not happen and an insecure connection occurs (CVE-2020-10754) ...