Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-1943
HistoryJun 14, 2011 - 12:00 a.m.

CVE-2011-1943

2011-06-1400:00:00
ubuntu.com
ubuntu.com
9

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

EPSS

0

Percentile

5.1%

The destroy_one_secret function in nm-setting-vpn.c in libnm-util in the
NetworkManager package 0.8.999-3.git20110526 in Fedora 15 creates a log
entry containing a certificate password, which allows local users to obtain
sensitive information by reading a log file.

Bugs

Notes

Author Note
sbeattie according to debian, affects network-manager, not network-manager-openvpn

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

EPSS

0

Percentile

5.1%