Description
It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.phase2-ca-path settings, when creating a new profile. When a user connects to a network using this profile, the authentication does not happen and the connection is made insecurely.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| [Red Hat] | NetworkManager | 1.24.2 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | network-manager | 1.24.2-1 | — |
| Debian 13 | network-manager | 1.24.2-1 | — |
| Debian 12 | network-manager | 1.24.2-1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 8 | NetworkManager +14 | 1:1.22.8-5.el8_2 | RHSA-2020:3011 |
| RHEL 7 | NetworkManager +14 | 1:1.18.8-1.el7 | RHSA-2020:4003 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | NetworkManager | 1.32.10-2.1 | openSUSE-SU-2024:10602-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2 | NetworkManager +13 | 1:1.18.8-1.amzn2.0.1 | ALAS2-2020-1498 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 8 | NetworkManager +14 | 1:1.22.8-5.el8_2 | ELSA-2020-3011 |
| Oracle Linux 7 | NetworkManager +14 | 1:1.18.8-1.el7 | ELSA-2020-4003 |
Advisories 6
- RHSA-2020:4003 Red Hat Security Advisory: NetworkManager security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- RHSA-2020:3011 Red Hat Security Advisory: NetworkManager security and bug fix update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- openSUSE-SU-2024:10602-1 NetworkManager-1.32.10-2.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- ALAS2-2020-1498 Moderate: NetworkManager security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Oct 22, 2020
- ELSA-2020-4003 Moderate: NetworkManager security and bug fix update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Oct 6, 2020
- ELSA-2020-3011 Moderate: NetworkManager security and bug fix update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Jul 24, 2020