CVE-2019-10786

Name of the Vulnerable Software and Affected Versions network-manager versions through 1.0.2

Description The issue allows remote attackers to execute arbitrary commands via the execSync() argument. This enables attackers to potentially gain control over the system, allowing them to perform malicious actions.

Recommendations For network-manager versions through 1.0.2, as a temporary workaround, consider disabling the use of the execSync() argument until a patch is available. Restrict access to the network-manager to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.