DEBIAN-CVE-2020-10754

DEBIAN-CVE-2020-10754 PUBLISHED CVSS 4.300000190734863 MEDIUM

It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.phase2-ca-path settings, when creating a new profile. When a user connects to a network using this profile, the authentication does not happen and the connection is made insecurely.

Risk Scores

CVSS 3.1

4.300000190734863

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected Products

Vendor	Product	Versions
Debian:12	network-manager	0, 0, 0
Debian:11	network-manager	0, 0, 0
Debian:13	network-manager	0, 0, 0
Debian:14	network-manager	0, 0, 0

Timeline

Jun 8, 2020 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2020-10754 advisory

Open in Interactive Console →