CVE-2025-57847

redhat ansible automation platform

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2025-57847

Katalog CVE

CVSS 6.4 · Medium EPSS 0,18%

Kerentanan Incorrect Default Permissions pada redhat ansible automation platform. Skor CVSS 3.1 6.4 (Medium) menurut redhat.com.

Deskripsi (NVD)

A container privilege escalation flaw was found in certain Ansible Automation Platform images. This issue arises from the /etc/passwd file being created with group-writable permissions during the build process. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root user, can leverage their membership in the root group to modify the /etc/passwd file. This vulnerability allows an attacker to add a new user with any arbitrary UID, including UID 0, gaining full root privileges within the container.

Rincian

Terbit di NVD
8 April 2026
Terakhir diubah
13 Oktober 2026
Status NVD
Modified
CVSS 3.1
6.4 (Medium), sumber redhat.com
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-276: Incorrect Default Permissions
EPSS (30 hari)
0,18% peluang dieksploitasi; lebih tinggi dari 6,9% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
redhat ansible automation platform Semua versi hingga 2.6

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 14 Okt 2026, 06:26 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.