{"id":"CVE-2012-1096","aliases":["EUVD-2012-1132","GHSA-xpp6-cqwc-x7wh","UBUNTU-CVE-2012-1096"],"status":"published","title":"NetworkManager 0.9 and earlier allows local users to use other users' certificates or private...","description":"NetworkManager 0.9 and earlier allows local users to use other users' certificates or private keys when making a connection via the file path when adding a new connection.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00716,"percentile":0.54039,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-295"],"published":"2020-03-10T16:36:31Z","modified":"2026-10-17T12:52:35Z","exploits":[{"source":"exploitdb","id":"EDB-36887","title":"GNOME NetworkManager 0.x - Local Arbitrary File Access","type":"local","platform":"linux","date":"2012-02-29","verified":true,"url":"https://www.exploit-db.com/exploits/36887"}],"affected":[{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"network-manager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.0.4-0ubuntu5","1.0.4-0ubuntu6","1.0.4-0ubuntu7","1.0.4-0ubuntu8","1.0.4-0ubuntu9","1.0.4-0ubuntu10","1.1.93-0ubuntu2","1.1.93-0ubuntu3","1.1.93-0ubuntu4","1.2.0-0ubuntu0.16.04.2","1.2.0-0ubuntu0.16.04.3","1.2.2-0ubuntu0.16.04.1","1.2.2-0ubuntu0.16.04.3","1.2.2-0ubuntu0.16.04.4","1.2.6-0ubuntu0.16.04.1","1.2.6-0ubuntu0.16.04.2","1.2.6-0ubuntu0.16.04.3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"network-manager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.4-1ubuntu3","1.8.4-1ubuntu4","1.10.4-1ubuntu2","1.10.4-1ubuntu3","1.10.6-2ubuntu1","1.10.6-2ubuntu1.1","1.10.6-2ubuntu1.2","1.10.6-2ubuntu1.4","1.10.14-0ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"network-manager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.20.4-2ubuntu2","1.20.4-2ubuntu3","1.20.8-1ubuntu2","1.22.4-1ubuntu2","1.22.8-1ubuntu1","1.22.10-1ubuntu1","1.22.10-1ubuntu2.1","1.22.10-1ubuntu2.2","1.22.10-1ubuntu2.3","1.22.10-1ubuntu2.4"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"network-manager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.32.12-0ubuntu1","1.32.12-0ubuntu2","1.34.0-2ubuntu3","1.35.90-0ubuntu1","1.35.91-0ubuntu1","1.35.92-1ubuntu1","1.36.0-1ubuntu2","1.36.2-1ubuntu1","1.36.4-1ubuntu1","1.36.4-2ubuntu1","1.36.6-0ubuntu1","1.36.6-0ubuntu2","1.36.6-0ubuntu2.1","1.36.6-0ubuntu2.2","1.36.6-0ubuntu2.3","1.36.6-0ubuntu2.4","1.36.6-0ubuntu2.5"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"network-manager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.44.2-1ubuntu1","1.44.2-1ubuntu1.1","1.44.2-1ubuntu2","1.44.2-7ubuntu1","1.45.90-1ubuntu1","1.45.90-1ubuntu3","1.46.0-1ubuntu2","1.46.0-1ubuntu2.2","1.46.0-1ubuntu2.3","1.46.0-1ubuntu2.4","1.46.0-1ubuntu2.5","1.46.0-1ubuntu2.6","1.46.0-1ubuntu2.7","1.46.0-1ubuntu2.8"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"network-manager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.52.0-1ubuntu1","1.52.0-1ubuntu3","1.52.0-1ubuntu3.1","1.52.0-1ubuntu3.2","1.52.0-1ubuntu3.3","1.52.0-1ubuntu3.4"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"network-manager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.54.3-2ubuntu3","1.56.0-7ubuntu1","1.56.1-1ubuntu1","1.58.0-2ubuntu1","1.58.1-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"network-manager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.52.0-1ubuntu3","1.52.0-1ubuntu4","1.54.2-2ubuntu1","1.54.2-2ubuntu2","1.54.3-2ubuntu1","1.54.3-2ubuntu2","1.54.3-2ubuntu3","1.54.3-2ubuntu3.1"]}],"products":[{"vendor":"[red hat]","product":"networkmanager"},{"vendor":"debian","product":"debian_linux"},{"vendor":"gnome","product":"networkmanager"}],"references":[{"url":"https://security-tracker.debian.org/tracker/CVE-2012-1096","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1096","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory"]},{"url":"https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-1096","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Third Party Advisory"]},{"url":"https://access.redhat.com/security/cve/cve-2012-1096","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2012/03/02/3","tags":["x_refsource_MISC","x_transferred","Mailing List","Third Party Advisory"]},{"url":"https://bugzilla.gnome.org/show_bug.cgi?id=793329","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-1096"},{"url":"https://github.com/advisories/GHSA-xpp6-cqwc-x7wh"},{"url":"https://ubuntu.com/security/CVE-2012-1096","tags":["report"]},{"url":"http://www.openwall.com/lists/oss-security/2012/02/29/2","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-1096","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2012-1096","description":"NetworkManager 0.9 and earlier allows local users to use other users' certificates or private keys when making a connection via the file path when adding a new connection.","status":"published","published":"2020-03-10T16:36:31Z","modified":"2024-08-06T18:45:27.252Z","updated_at":"2026-11-02T14:34:52.27879Z"}],"euvd":[{"id":"EUVD-2012-1132","description":"NetworkManager 0.9 and earlier allows local users to use other users' certificates or private keys when making a connection via the file path when adding a new connection.","status":"published","published":"2020-03-10T16:36:31Z","modified":"2024-08-06T18:45:27Z","updated_at":"2026-11-03T01:56:18.872973Z"}],"ghsa":[{"id":"GHSA-xpp6-cqwc-x7wh","title":"NetworkManager 0.9 and earlier allows local users to use other users' certificates or private...","description":"NetworkManager 0.9 and earlier allows local users to use other users' certificates or private keys when making a connection via the file path when adding a new connection.","status":"published","published":"2022-04-23T00:40:48Z","modified":"2023-01-27T05:02:06Z","updated_at":"2026-11-02T14:42:01.451226Z"}],"nvd":[{"id":"CVE-2012-1096","description":"NetworkManager 0.9 and earlier allows local users to use other users' certificates or private keys when making a connection via the file path when adding a new connection.","status":"published","published":"2020-03-10T17:15:12.627Z","modified":"2026-06-16T23:39:00.983Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.9,"vector":"AV:L/AC:L/Au:N/C:C/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-295"],"updated_at":"2026-11-02T14:02:18.043773Z"}],"osv":[{"id":"UBUNTU-CVE-2012-1096","description":"NetworkManager 0.9 and earlier allows local users to use other users' certificates or private keys when making a connection via the file path when adding a new connection.","status":"published","published":"2020-03-10T17:15:00Z","modified":"2026-10-17T12:52:35.090316798Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:06.395274Z"}]}}