{"id":"MGASA-2014-0560","aliases":[],"status":"published","title":"Updated plasma-nm packages add openvpn certificate verification","description":"Updated plasma-applet-nm packages add OpenVPN option for server certificate \nverification\n\nPlasma-nm does not tell OpenVPN to perform server certificate verification. \nConsequently, anyone with the preshared key is able to perform a MITM attack by \nimpersonating the server.\n\nThis update add option to the OpenVPN plugin for server certificate verification.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2014-12-31T12:28:04Z","modified":"2026-04-16T04:28:15Z","fixes":[{"ecosystem":"Mageia:4","package":"plasma-nm","fixed_in":["0.9.3.2-1.1.mga4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:4","package":"plasma-nm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.3.2-1.1.mga4"}]}]}],"references":[{"url":"https://advisories.mageia.org/MGASA-2014-0560.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=14812","tags":["report"]},{"url":"https://bugs.kde.org/show_bug.cgi?id=341069","tags":["report"]},{"url":"http://lwn.net/Vulnerabilities/626419","tags":["web"]},{"url":"https://lists.fedoraproject.org/pipermail/package-announce/2014-December/146024.html","tags":["web"]}],"sources":{"osv":[{"id":"MGASA-2014-0560","title":"Updated plasma-nm packages add openvpn certificate verification","description":"Updated plasma-applet-nm packages add OpenVPN option for server certificate \nverification\n\nPlasma-nm does not tell OpenVPN to perform server certificate verification. \nConsequently, anyone with the preshared key is able to perform a MITM attack by \nimpersonating the server.\n\nThis update add option to the OpenVPN plugin for server certificate verification.\n","status":"published","published":"2014-12-31T12:28:04Z","modified":"2026-04-16T04:28:15.187587Z","updated_at":"2026-11-02T15:49:39.488462Z"}]}}