CVE-2020-10754
CVE-2020-10754
This page contains facts from public vulnerability sources. Check the original advisory before updating.
It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.phase2-ca-path settings, when creating a new profile. When a user connects to a network using this profile, the authentication does not happen and the connection is made insecurely.
CVSS 4.3 · Medium · EPSS 1.0% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
networkmanager
- Versions
- 1.24.2: Affected
No fix published
network-manager Debian:12
- Affected ranges
- ECOSYSTEM: < 1.24.2-1
Update to 1.24.2-1
network-manager Debian:13
- Affected ranges
- ECOSYSTEM: < 1.24.2-1
Update to 1.24.2-1
network-manager Debian:14
- Affected ranges
- ECOSYSTEM: < 1.24.2-1
Update to 1.24.2-1