Improper authorization control for web services In network-manager
Description
GNOME NetworkManager before 0.8.6 does not properly enforce the auth_admin element in PolicyKit, which allows local users to bypass intended wireless network sharing restrictions via unspecified vectors.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 debian 14 | 0.9.0-1 | ||
debian 11 | 0.9.0-1 | ||
debian 13 | 0.9.0-1 | ||
debian 12 | 0.9.0-1 | ||
 rpm rhel6 | 1:0.8.1-9.el6_1.1 |
Aliases
1. 2. 3. 4. 5.