CVE-2025-9615

lowPriorität · verfolgen · 0EPSS 0.002 · 5. PerzentilDEEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.16% (5th) EPSS

CVSS 3.3 · low

Is it mine?

21 products

Prüfe deine Angriffsfläche

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · bewertet 2026-10-27

A flaw was found in NetworkManager. The NetworkManager package allows access to files that may belong to other users. NetworkManager allows non-root users to configure the system's network. The daemon runs with root privileges and can access files owned by users different from the one who added the connection.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

BehobenNetworkManager-applet-l2tp-0:1.52.0-1.1.aarch64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
BehobenNetworkManager-applet-l2tp-0:1.52.0-1.1.ppc64le as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
BehobenNetworkManager-applet-l2tp-0:1.52.0-1.1.s390x as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
BehobenNetworkManager-applet-l2tp-0:1.52.0-1.1.x86_64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
BehobenNetworkManager-l2tp-0:1.52.0-1.1.aarch64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
BehobenNetworkManager-l2tp-0:1.52.0-1.1.ppc64le as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
BehobenNetworkManager-l2tp-0:1.52.0-1.1.s390x as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
BehobenNetworkManager-l2tp-0:1.52.0-1.1.x86_64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
BehobenNetworkManager-l2tp-lang-0:1.52.0-1.1.aarch64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
BehobenNetworkManager-l2tp-lang-0:1.52.0-1.1.ppc64le as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
BehobenNetworkManager-l2tp-lang-0:1.52.0-1.1.s390x as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
BehobenNetworkManager-l2tp-lang-0:1.52.0-1.1.x86_64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
BehobenNetworkManager-applet-strongswan-0:1.6.4-1.1.aarch64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
BehobenNetworkManager-applet-strongswan-0:1.6.4-1.1.ppc64le as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
BehobenNetworkManager-applet-strongswan-0:1.6.4-1.1.s390x as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
BehobenNetworkManager-applet-strongswan-0:1.6.4-1.1.x86_64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
BehobenNetworkManager-strongswan-0:1.6.4-1.1.aarch64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
BehobenNetworkManager-strongswan-0:1.6.4-1.1.ppc64le as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
BehobenNetworkManager-strongswan-0:1.6.4-1.1.s390x as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
BehobenNetworkManager-strongswan-0:1.6.4-1.1.x86_64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
BehobenNetworkManager-strongswan-lang-0:1.6.4-1.1.aarch64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
BehobenNetworkManager-strongswan-lang-0:1.6.4-1.1.ppc64le as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
BehobenNetworkManager-strongswan-lang-0:1.6.4-1.1.s390x as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
BehobenNetworkManager-strongswan-lang-0:1.6.4-1.1.x86_64 as component of openSUSE Tumbleweedsuse_csaf
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

5.5

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · low–medium · 3.3–5.5

v3.03.3lowCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:Nsecondary · ENISA EU

v3.03.3lowCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:Nsecondary · secalert@redhat.com USAusnutzbarkeit 1.8 · Auswirkung 1.4

v3.13.3lowAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:Nsecondary · FSTEC (BDU) RU

v3.15.5mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:Nsecondary · SUSE Product Security

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Trackcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-281USCWE-281US

betroffene Produkte (21)

Betroffene Produkte und Versionsbereiche.

Fedora Linuxalle Versionencert_bundDEcpe:/o:fedoraproject:fedora:-
Open Source strongSwan <6.0.4alle Versionencert_bundDE
Open Source strongSwan Networkmanager <1.6.4alle Versionencert_bundDE
Oracle Linuxalle Versionencert_bundDEcpe:/o:oracle:linux:-
RESF Rocky Linuxalle Versionencert_bundDEcpe:/o:resf:rocky_linux:-
Red Hat Enterprise Linuxalle Versionencert_bundDEcpe:/o:redhat:enterprise_linux:-
SUSE Linuxalle Versionencert_bundDEcpe:/o:suse:suse_linux:-
SUSE openSUSEalle Versionencert_bundDEcpe:/o:suse:opensuse:-
Open Source strongSwan≤ Networkmanager <1.6.4cert_bundDE
Open Source strongSwan< 6.0.4cert_bundDE
Red Hat Red Hat Enterprise Linux 10< 1:1.56.0-1.el10enisa_euvdEU
Red Hat Red Hat Enterprise Linux 9< 1:1.54.3-2.el9enisa_euvdEU
Red Hat Inc. NetworkManager≤ 1.52.0fstec_bduRU
Red Hat Inc. OpenShift Container Platform≤ 4fstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux≤ 7fstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux≤ 10fstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux≤ 9fstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux≤ 8fstec_bduRU
АО «ИВК» АЛЬТ СП 10alle Versionenfstec_bduRU
АО «СберТех» Platform V SberLinux OS Server≤ 9.2.0-fstecfstec_bduRU

20 von 21 angezeigt

Advisories (3)

Hersteller- und Ökosystem-Meldungen dazu.

WID-SEC-W-2025-2846strongSwan (NetworkManager-Plugin): Schwachstelle ermöglicht Umgehen von SicherheitsvorkehrungenDeutsch2025-12-14csaf · cert_bundDE
Ein lokaler Angreifer kann eine Schwachstelle in strongSwan ausnutzen, um Sicherheitsvorkehrungen zu umgehen.
openSUSE-SU-2026:10051-1NetworkManager-applet-l2tp-1.52.0-1.1 on GA media2026-01-15csaf · suse_csafDE
NetworkManager-applet-l2tp-1.52.0-1.1 on GA media
openSUSE-SU-2026:10295-1NetworkManager-applet-strongswan-1.6.4-1.1 on GA media2026-03-07csaf · suse_csafDE
NetworkManager-applet-strongswan-1.6.4-1.1 on GA media

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu cert_bund suse_csaf NVD CVE.org MITRE

veröffentlicht 2026-01-26geändert 2026-06-30

Referenzen (19)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan