CVE-2020-10754

It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.phase2-ca-path settings, when creating a new profile. When a user connects to a network using this profile, the authentication does not happen and the connection is made insecurely.

References

Affected packages

Git / gitlab.freedesktop.org/NetworkManager/NetworkManager

Affected ranges

Type

GIT

Repo

https://gitlab.freedesktop.org/NetworkManager/NetworkManager

Events

Introduced

Fixed

8e62305aa45a267ca44184640f32a8bff9f82df6

Introduced

ea141ba8f8d1cf72e3bd752199c1076821fffdf9

Fixed

972453d7352e92f4f988e00d6f43636835a1ae91

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.22.14"
        },
        {
            "introduced": "1.24.0"
        },
        {
            "fixed": "1.24.2"
        }
    ]
}

Affected versions

1.*

1.24.0

1.24.1-dev

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-10754.json"

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "31"
            }
        ]
    }
]