CVE-2012-2736
Publication date 18 June 2012
Last updated 24 July 2024
Ubuntu priority
Cvss 3 Severity Score
In NetworkManager 0.9.2.0, when a new wireless network was created with WPA/WPA2 security in AdHoc mode, it created an open/insecure network.
Status
Package | Ubuntu Release | Status |
---|---|---|
network-manager | ||
network-manager-applet | ||
Notes
jdstrand
This only affects Ad-Hoc networks that the user creates, not networks the user connects to Per upstream, this is actually a problem with the kernel as of 2.6.30
Severity score breakdown
Parameter | Value |
---|---|
Base score | 4.4 · Medium |
Attack vector | Local |
Attack complexity | Low |
Privileges required | Low |
User interaction | None |
Scope | Unchanged |
Confidentiality | Low |
Integrity impact | Low |
Availability impact | None |
Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N |
References
Related Ubuntu Security Notices (USN)
- USN-1483-2
- network-manager-applet vulnerability
- 27 June 2012
- USN-1483-1
- NetworkManager vulnerability
- 27 June 2012