Skip to content
OpenAdvisories
Medium WID-SEC-2026-1033 5 CVEs

Verschiedene Red Hat Produkte: Mehrere Schwachstellen ermöglichen Erlangen von Administratorrechten

Published Apr 8, 2026 · Updated Sep 23, 2026 · Revision 4 · de-DE

Vendor: Red Hat Product: Ansible Automation Platform Product: Enterprise Linux Product: openshift Product: Process Automation Manager

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in mehreren Red Hat-Produkten ausnutzen, um Administratorrechte zu erlangen.

Product

Red Hat Ansible Automation Platform ist eine End-to-End-Automatisierungsplattform für die Systemkonfiguration, die Softwarebereitstellung und die Orchestrierung erweiterter Workflows.
Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.
Red Hat OpenShift ist eine "Platform as a Service" (PaaS) Lösung zur Bereitstellung von Applikationen in der Cloud.
Red Hat Process Automation Manager ist eine Plattform zur Entwicklung von containerisierten Microservices und Anwendungen, die Geschäftsentscheidungen und -prozesse automatisieren.

Vulnerabilities 5

  • Medium 6.4
    CVE-2025-57847

    Ansible-automation-platform: privilege escalation via excessive group writable /etc/passwd permissions

    A container privilege escalation flaw was found in certain Ansible Automation Platform images. This issue arises from the /etc/passwd file being created with group-writable permissions during the build process. In certain conditions, an attacker who can execu…

    Red Hat Red Hat Ansible Automation Platform 2 Red Hat Ansible Automation Platform 2.7 Red Hat Ansible Automation Platform 2.6
  • Medium 6.4
    CVE-2025-57851

    Mce: privilege escalation via excessive /etc/passwd permissions

    A container privilege escalation flaw was found in certain Multicluster Engine for Kubernetes images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execut…

    Red Hat Multicluster Engine for Kubernetes
  • Medium 6.4
    CVE-2025-57853

    Web-terminal: privilege escalation via excessive /etc/passwd permissions

    A container privilege escalation flaw was found in certain Web Terminal images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an a…

    Red Hat Red Hat Web Terminal
  • Medium 6.4
    CVE-2025-57854

    Osus-operator: privilege escalation via excessive /etc/passwd permissions

    A container privilege escalation flaw was found in certain OpenShift Update Service (OSUS) images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute c…

    Red Hat Red Hat OpenShift Update Service
  • Medium 6.4
    CVE-2025-58713

    Rhpam: privilege escalation via excessive /etc/passwd permissions

    A container privilege escalation flaw was found in certain Red Hat Process Automation Manager images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execut…

    Red Hat Red Hat Process Automation 7

Revision history

  1. #4

    Neue Updates von Red Hat aufgenommen

  2. #3

    Neue Updates von Red Hat aufgenommen

  3. #2

    Neue Updates von Red Hat aufgenommen

  4. #1

    Initiale Fassung

References