Skip to content
Threat Feed
Subscribe

Product

NetworkManager

2 briefs RSS
high advisory

NetworkManager Local Privilege Escalation and Credential Theft via CA Path Manipulation

An improper authorization vulnerability in NetworkManager allows unprivileged local users to bypass 802.1X server certificate validation, facilitating credential theft through rogue access points.

NetworkManager +7 credential-access local-privilege-escalation linux networking 802.1x vulnerability
1t 2c
high advisory

Systeminformation Library Vulnerable to Command Injection via NetworkManager Profile Name

The systeminformation library is vulnerable to command injection on Linux systems due to unsanitized NetworkManager connection profile names, allowing attackers to execute arbitrary shell commands via a crafted profile when `networkInterfaces()` is called.

networkmanager +1 command-injection linux
2r 1t