CVE-2020-10754: Medium severity IBM Security Guardium vulnerability
It was found that nmcli, a command line interface to NetworkManager did not honour 802-1x.ca-path and 802-1x.phase2-ca-path settings, when creating a new profile. When a user connects to a network using this profile, the authentication does not happen and the connection is made insecurely.
Other sources
NetworkManager could allow a remote authenticated attacker to bypass security restrictions, caused by improper configuration in the nmcli. By connecting to a network, an attacker could exploit this vulnerability to bypass authentication.
— IBM
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2020-10754?
CVE-2020-10754 is a vulnerability in NetworkManager that allows a remote authenticated attacker to bypass security restrictions and make insecure connections.
How does CVE-2020-10754 impact IBM Security Guardium?
CVE-2020-10754 affects IBM Security Guardium versions 10.5 to 11.3, allowing for bypassing of security restrictions.
What is the severity of CVE-2020-10754?
CVE-2020-10754 has a severity rating of 4.3, classified as medium.
How can I fix CVE-2020-10754 in IBM Security Guardium?
To fix CVE-2020-10754 in IBM Security Guardium, upgrade to a version that is not affected by the vulnerability.
Are there any references for CVE-2020-10754?
Yes, you can find references for CVE-2020-10754 at the following links: [Link 1](https://exchange.xforce.ibmcloud.com/vulnerabilities/184636), [Link 2](https://www.ibm.com/support/pages/node/6455281), [Link 3](https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10754).