Local Information Disclosure in NetworkManager by Red Hat

CVE-2009-4145

Summary

NetworkManager contains a vulnerability in the nm-connection-editor component, where connection objects are exported over D-Bus. This issue allows local users to access D-Bus signals and potentially retrieve sensitive information such as WiFi passwords by monitoring these signals with tools like dbus-monitor. This raises concerns about data security as unauthorized users can exploit this flaw to obtain confidential connection information.

References