Unrated severityNVD Advisory· Published Dec 23, 2009· Updated Apr 23, 2026
CVE-2009-4145
CVE-2009-4145
Description
nm-connection-editor in NetworkManager (NM) 0.7.x exports connection objects over D-Bus upon actions in the connection editor GUI, which allows local users to obtain sensitive information by reading D-Bus signals, as demonstrated by using dbus-monitor to discover the password for the WiFi network.
Affected products
1- cpe:2.3:a:gnome:networkmanager:0.7.2:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
11- git.gnome.org/browse/network-manager-applet/commit/nvdPatch
- git.gnome.org/browse/network-manager-applet/commit/nvdPatch
- bugzilla.redhat.com/show_bug.cginvdPatch
- secunia.com/advisories/37819nvdVendor Advisory
- lists.opensuse.org/opensuse-security-announce/2010-02/msg00000.htmlnvd
- secunia.com/advisories/38420nvd
- www.openwall.com/lists/oss-security/2009/12/16/3nvd
- www.redhat.com/support/errata/RHSA-2010-0108.htmlnvd
- www.securityfocus.com/bid/37580nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/54898nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10539nvd
News mentions
0No linked articles in our index yet.