PT-2020-7042

CVE-2006-7246

Published

2012-02-18

Updated

2024-06-15

Description by

CVSS 3.1

6.8

Medium

MetricsAV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions NetworkManager versions 0.9.x

Description The issue concerns a problem where NetworkManager does not properly associate a certificate's subject with an ESSID when using 802.11X authentication. This could potentially lead to security issues, as the authentication process may not correctly verify the identity of the network being connected to.

Recommendations For NetworkManager versions 0.9.x, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Ludwig Nussel

Vendors

Affected products

Weakness enumeration

CWE-295: Improper Certificate Validation

Related identifiers

CVE-2006-7246

ALT-PU-2014-1962