Threats Tagged 'cve-2025-58712'

A container privilege escalation flaw was found in certain AMQ Broker images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root user, can leverage their membership in the root group to modify the /etc/passwd file. This could allow the attacker to add a new user with any arbitrary UID, including UID 0, leading to full root privileges within the container.

MediumVulnerabilityUnited StatesGermanyUnited Kingdom+7#cve#cve-2025-58712

Red Hat released a security update for AMQ Broker 7.13.2 container images addressing a privilege escalation vulnerability (CVE-2025-58712) caused by excessive permissions on the /etc/passwd file in amq-broker-init-rhel9 and amq-broker-rhel9 components. This vulnerability could allow unauthorized privilege escalation. The update is rated as moderate severity by Red Hat Product Security. The advisory covers multiple Red Hat OpenShift Container Platform versions on various architectures. Users are advised to update to the latest container images provided by Red Hat.