Information Disclosure in NetworkManager by Fedora

CVE-2011-1943

Summary

The destroy_one_secret function in the NetworkManager package contains a vulnerability that results in unintended exposure of sensitive information. Specifically, it generates a log entry that includes a certificate password, enabling local users to gain unauthorized access to this sensitive data by simply reading the log file. This issue underscores the importance of implementing robust logging practices to protect sensitive information from unauthorized access.

References