CVE-2012-1096

NetworkManager 0.9 and earlier allows local users to use other users' certificates or private...

5.5 MediumPublic exploit

CVE-2012-1096 is a medium vulnerability (CVSS 5.5) in [red Hat] Networkmanager, published March 10, 2020. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.72%, the 53rd percentile. No source names a fixed version.

NetworkManager 0.9 and earlier allows local users to use other users' certificates or private keys when making a connection via the file path when adding a new connection.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: None
Availability: None

Exploit likelihood

0.72%Down 1.4 points since Feb 4, 2022

What each source reports

NVD Score used 5.5

NetworkManager 0.9 and earlier allows local users to use other users' certificates or private keys when making a connection via the file path when adding a new connection.

Record: CVE-2012-1096
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0: 4.9 MediumAV:L/AC:L/Au:N/C:C/I:N/A:N
Weakness: CWE-295
Updated: 2026-11-02

CVE List No score

NetworkManager 0.9 and earlier allows local users to use other users' certificates or private keys when making a connection via the file path when adding a new connection.

Record: CVE-2012-1096
Updated: 2026-11-02

EUVDEUVD-2012-1132 No score

NetworkManager 0.9 and earlier allows local users to use other users' certificates or private keys when making a connection via the file path when adding a new connection.

Record: EUVD-2012-1132
Updated: 2026-11-03

GitHub AdvisoriesGHSA-xpp6-cqwc-x7wh No score

NetworkManager 0.9 and earlier allows local users to use other users' certificates or private...

NetworkManager 0.9 and earlier allows local users to use other users' certificates or private keys when making a connection via the file path when adding a new connection.

Record: GHSA-xpp6-cqwc-x7wh
Updated: 2026-11-02

OSVUBUNTU-CVE-2012-1096 5.5

NetworkManager 0.9 and earlier allows local users to use other users' certificates or private keys when making a connection via the file path when adding a new connection.

Record: UBUNTU-CVE-2012-1096
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`network-manager` Ubuntu:16.04:LTS	All versions, plus listed versions 1.0.4-0ubuntu51.0.4-0ubuntu61.0.4-0ubuntu71.0.4-0ubuntu81.0.4-0ubuntu9 Show 12 moreShow less 1.0.4-0ubuntu101.1.93-0ubuntu21.1.93-0ubuntu31.1.93-0ubuntu41.2.0-0ubuntu0.16.04.21.2.0-0ubuntu0.16.04.31.2.2-0ubuntu0.16.04.11.2.2-0ubuntu0.16.04.31.2.2-0ubuntu0.16.04.41.2.6-0ubuntu0.16.04.11.2.6-0ubuntu0.16.04.21.2.6-0ubuntu0.16.04.3	None known
`network-manager` Ubuntu:18.04:LTS	All versions, plus listed versions 1.8.4-1ubuntu31.8.4-1ubuntu41.10.4-1ubuntu21.10.4-1ubuntu31.10.6-2ubuntu1 Show 4 moreShow less 1.10.6-2ubuntu1.11.10.6-2ubuntu1.21.10.6-2ubuntu1.41.10.14-0ubuntu2	None known
`network-manager` Ubuntu:20.04:LTS	All versions, plus listed versions 1.20.4-2ubuntu21.20.4-2ubuntu31.20.8-1ubuntu21.22.4-1ubuntu21.22.8-1ubuntu1 Show 5 moreShow less 1.22.10-1ubuntu11.22.10-1ubuntu2.11.22.10-1ubuntu2.21.22.10-1ubuntu2.31.22.10-1ubuntu2.4	None known
`network-manager` Ubuntu:22.04:LTS	All versions, plus listed versions 1.32.12-0ubuntu11.32.12-0ubuntu21.34.0-2ubuntu31.35.90-0ubuntu11.35.91-0ubuntu1 Show 12 moreShow less 1.35.92-1ubuntu11.36.0-1ubuntu21.36.2-1ubuntu11.36.4-1ubuntu11.36.4-2ubuntu11.36.6-0ubuntu11.36.6-0ubuntu21.36.6-0ubuntu2.11.36.6-0ubuntu2.21.36.6-0ubuntu2.31.36.6-0ubuntu2.41.36.6-0ubuntu2.5	None known
`network-manager` Ubuntu:24.04:LTS	All versions, plus listed versions 1.44.2-1ubuntu11.44.2-1ubuntu1.11.44.2-1ubuntu21.44.2-7ubuntu11.45.90-1ubuntu1 Show 9 moreShow less 1.45.90-1ubuntu31.46.0-1ubuntu21.46.0-1ubuntu2.21.46.0-1ubuntu2.31.46.0-1ubuntu2.41.46.0-1ubuntu2.51.46.0-1ubuntu2.61.46.0-1ubuntu2.71.46.0-1ubuntu2.8	None known
`network-manager` Ubuntu:25.10	All versions, plus listed versions 1.52.0-1ubuntu11.52.0-1ubuntu31.52.0-1ubuntu3.11.52.0-1ubuntu3.21.52.0-1ubuntu3.31.52.0-1ubuntu3.4	None known
`network-manager` Ubuntu:26.10	All versions, plus listed versions 1.54.3-2ubuntu31.56.0-7ubuntu11.56.1-1ubuntu11.58.0-2ubuntu11.58.1-1ubuntu3	None known
`network-manager` Ubuntu:26.04:LTS	All versions, plus listed versions 1.52.0-1ubuntu31.52.0-1ubuntu41.54.2-2ubuntu11.54.2-2ubuntu21.54.3-2ubuntu11.54.3-2ubuntu21.54.3-2ubuntu31.54.3-2ubuntu3.1	None known

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	GNOME NetworkManager 0.x - Local Arbitrary File Access	2012-02-29

History

History
When	Changed	Sources
2026-11-03	aliases, products	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV

References

Show 5 moreShow less