← CVE Intelligence

CVE-2025-57847

Ansible-automation-platform: privilege escalation via excessive group writable /etc/passwd permissions PUBLISHED

Description (CNA)

A container privilege escalation flaw was found in certain Ansible Automation Platform images. This issue arises from the /etc/passwd file being created with group-writable permissions during the build process. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root user, can leverage their membership in the root group to modify the /etc/passwd file. This vulnerability allows an attacker to add a new user with any arbitrary UID, including UID 0, gaining full root privileges within the container.

Affected (CNA)

Vendor / productVersions
Red Hat / Red Hat Ansible Automation Platform 2.16unaffected 1789001438 before *
Red Hat / Red Hat Ansible Automation Platform 2.16unaffected 1789023765 before *
Red Hat / Red Hat Ansible Automation Platform 2.18unaffected 1789023329 before *
Red Hat / Red Hat Ansible Automation Platform 2.18unaffected 1789001715 before *
Red Hat / Red Hat Ansible Automation Platform 2.5unaffected 1784035663 before *
Red Hat / Red Hat Ansible Automation Platform 2.5unaffected 1789634812 before *
Red Hat / Red Hat Ansible Automation Platform 2.5unaffected 1784051694 before *
Red Hat / Red Hat Ansible Automation Platform 2.5unaffected 1789654540 before *
Red Hat / Red Hat Ansible Automation Platform 2.6unaffected 1789658734 before *
Red Hat / Red Hat Ansible Automation Platform 2.6unaffected 1789661423 before *
Red Hat / Red Hat Ansible Automation Platform 2.6unaffected 1789654312 before *
Red Hat / Red Hat Ansible Automation Platform 2.7unaffected 1788901236 before *
Red Hat / Red Hat Ansible Automation Platform 2.7unaffected 1789582543 before *
Red Hat / Red Hat Ansible Automation Platform 2.7unaffected 1789584820 before *
Red Hat / Red Hat Ansible Automation Platform 2affected
Red Hat / Red Hat Ansible Automation Platform 2unaffected
Red Hat / Red Hat Ansible Automation Platform 2unaffected
Red Hat / Red Hat Ansible Automation Platform 2affected
Red Hat / Red Hat Ansible Automation Platform 2affected
Red Hat / Red Hat Ansible Automation Platform 2affected
Red Hat / Red Hat Ansible Automation Platform 2affected
Red Hat / Red Hat Ansible Automation Platform 2affected
Red Hat / Red Hat Ansible Automation Platform 2affected
Red Hat / Red Hat Ansible Automation Platform 2unaffected
Red Hat / Red Hat Ansible Automation Platform 2affected
Red Hat / Red Hat Ansible Automation Platform 2affected
Red Hat / Red Hat Ansible Automation Platform 2affected
Red Hat / Red Hat Ansible Automation Platform Ansible Core 2unaffected
Red Hat / Red Hat Ansible Automation Platform Ansible Core 2affected

CWE

CWE-276

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.