Skip to content
CVE PROGRAM SOURCE RECORD6.4 Medium

CVE-2025-57847

Ansible-automation-platform: privilege escalation via excessive group writable /etc/passwd permissions

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

A container privilege escalation flaw was found in certain Ansible Automation Platform images. This issue arises from the /etc/passwd file being created with group-writable permissions during the build process. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root user, can leverage their membership in the root group to modify the /etc/passwd file. This vulnerability allows an attacker to add a new user with any arbitrary UID, including UID 0, gaining full root privileges within the container.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Red Hat Red Hat Ansible Automation Platform 2.16

Default version status: affected

  • 1789001438 to < *unaffected

Red Hat Red Hat Ansible Automation Platform 2.16

Default version status: affected

  • 1789023765 to < *unaffected

Red Hat Red Hat Ansible Automation Platform 2.18

Default version status: affected

  • 1789023329 to < *unaffected

Red Hat Red Hat Ansible Automation Platform 2.18

Default version status: affected

  • 1789001715 to < *unaffected

Red Hat Red Hat Ansible Automation Platform 2.5

Default version status: affected

  • 1784035663 to < *unaffected

Red Hat Red Hat Ansible Automation Platform 2.5

Default version status: affected

  • 1789634812 to < *unaffected

Red Hat Red Hat Ansible Automation Platform 2.5

Default version status: affected

  • 1784051694 to < *unaffected

Red Hat Red Hat Ansible Automation Platform 2.5

Default version status: affected

  • 1789654540 to < *unaffected

Red Hat Red Hat Ansible Automation Platform 2.6

Default version status: affected

  • 1789658734 to < *unaffected

Red Hat Red Hat Ansible Automation Platform 2.6

Default version status: affected

  • 1789661423 to < *unaffected

Red Hat Red Hat Ansible Automation Platform 2.6

Default version status: affected

  • 1789654312 to < *unaffected

Red Hat Red Hat Ansible Automation Platform 2.7

Default version status: affected

  • 1788901236 to < *unaffected

Red Hat Red Hat Ansible Automation Platform 2.7

Default version status: affected

  • 1789582543 to < *unaffected

Red Hat Red Hat Ansible Automation Platform 2.7

Default version status: affected

  • 1789584820 to < *unaffected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: affected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: unaffected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: unaffected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: affected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: affected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: affected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: affected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: affected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: affected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: unaffected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: affected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: affected

Red Hat Red Hat Ansible Automation Platform 2

Default version status: affected

Red Hat Red Hat Ansible Automation Platform Ansible Core 2

Default version status: unaffected

Red Hat Red Hat Ansible Automation Platform Ansible Core 2

Default version status: affected

References