CVE-2012-1096

CVE-2012-1096 describes a local arbitrary file access vulnerability in NetworkManager versions 0.9 and earlier, affecting Debian and GNOME NetworkManager. A local attacker can exploit this flaw to access other users' certificates or private keys by manipulating file paths when creating new network connections. This medium-severity vulnerability has a CVSS score of 5.5, indicating a low attack complexity and requiring local user privileges, with a high impact on confidentiality. While there is no evidence of active exploitation or Metasploit modules, an exploit is publicly available on ExploitDB, and the CVE has received minimal community discussion or media coverage.