CVE-2025-58713
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
23/100
Published: 2026-04-08
Modified: 2026-11-05
First seen: 2026-11-05
Status: active
Attack Surface
No Interaction
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Local
AC:
High
PR:
High
UI:
None
S:
Unchanged
C:
High
I:
High
A:
High
Description
A container privilege escalation flaw was found in certain Red Hat Process Automation Manager images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root user, can leverage their membership in the root group to modify the /etc/passwd file. This could allow the attacker to add a new user with any arbitrary UID, including UID 0, leading to full root privileges within the container.
Weakness Classification (1)
Affected Software (1)
| Vendor | Product | Version |
|---|---|---|
| redhat | process_automation_manager | 7.0 |
References & Advisories (2)
vdb-entry
x_refsource_REDHAT
issue-tracking
x_refsource_REDHAT