6.4

CVE-2025-57847

Ansible-automation-platform: privilege escalation via excessive group writable /etc/passwd permissions

A container privilege escalation flaw was found in certain Ansible Automation Platform images. This issue arises from the /etc/passwd file being created with group-writable permissions during the build process. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root user, can leverage their membership in the root group to modify the /etc/passwd file. This vulnerability allows an attacker to add a new user with any arbitrary UID, including UID 0, gaining full root privileges within the container.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.16% 0.055
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
RedHat 6.4 0.5 5.9
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE-276 Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

https://bugzilla.redhat.com/show_bug.cgi?id=2391092
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:42141
https://access.redhat.com/errata/RHSA-2026:42144
https://access.redhat.com/security/cve/CVE-2025-57847
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:66482
https://access.redhat.com/errata/RHSA-2026:66487
https://access.redhat.com/errata/RHSA-2026:66485
https://access.redhat.com/errata/RHSA-2026:66486
https://access.redhat.com/errata/RHSA-2026:67279
https://access.redhat.com/errata/RHSA-2026:71179
https://access.redhat.com/errata/RHSA-2026:71177
https://access.redhat.com/errata/RHSA-2026:71192
https://access.redhat.com/errata/RHSA-2026:71210