6.4Media
CVE-2025-57847Ansible-automation-platform: privilege escalation via excessive group writable /etc/passwd permissions
Descripción
A container privilege escalation flaw was found in certain Ansible Automation Platform images. This issue arises from the /etc/passwd file being created with group-writable permissions during the build process. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root user, can leverage their membership in the root group to modify the /etc/passwd file. This vulnerability allows an attacker to add a new user with any arbitrary UID, including UID 0, gaining full root privileges within the container.
Debilidad (CWE):
CWE-276
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| ansible automation platform | 2.5 | — | |
| ansible automation platform | 2.6 | — | |
| ansible automation platform | 2.7 | — | |
| ansible core | 2.16 | — | |
| ansible core | 2.18 | — | |
| redhat | ansible automation platform | ≤ 2.6 | |
| Red Hat | Red Hat Ansible Automation Platform 2 | all versions | |
| Red Hat | Red Hat Ansible Automation Platform 2.16 | all versions | |
| Red Hat | Red Hat Ansible Automation Platform 2.18 | all versions | |
| Red Hat | Red Hat Ansible Automation Platform 2.5 | all versions | |
| Red Hat | Red Hat Ansible Automation Platform 2.6 | all versions | |
| Red Hat | Red Hat Ansible Automation Platform 2.7 | all versions | |
| Red Hat | Red Hat Ansible Automation Platform Ansible Core 2 | all versions |
Referencias y parches
- RHSA-2026:42141 vendor-advisory
- RHSA-2026:42144 vendor-advisory
- RHSA-2026:66482 vendor-advisory
- RHSA-2026:66485 vendor-advisory
- RHSA-2026:66486 vendor-advisory
- RHSA-2026:66487 vendor-advisory
- RHSA-2026:67279 vendor-advisory
- RHSA-2026:71177 vendor-advisory
- RHSA-2026:71179 vendor-advisory
- RHSA-2026:71192 vendor-advisory
- RHSA-2026:71210 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2025-57847 vdb-entryVendor Advisory
- RHBZ#2391092 issue-trackingVendor Advisory
Coincidencias CPE (NVD) (1)
cpe:2.3:a:redhat:ansible_automation_platform:*:*:*:*:*:*:*:*≤ 2.6