Local Privilege Escalation in NetworkManager Affects Multiple Linux Distributions
CVE-2012-1096
5.5MEDIUM
Summary
NetworkManager versions prior to 0.9 expose a vulnerability that permits local users to utilize other users' certificates or private keys when establishing new connections. This misconfiguration can lead to unauthorized access to sensitive information, highlighting potential risks in multi-user environments where multiple accounts are leveraged.
Affected Version(s)
NetworkManager 0.9 and earlier
References
CVSS V3.1
Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved