Riskcovery

CVE-2025-58712

Amq: privilege escalation via excessive /etc/passwd permissions

State
Published
Severity
6.4 Medium
Published
Oct 22, 2025
Updated
Mar 6, 2026
Reserved
Sep 3, 2025

Read the record on cve.org

Description

A container privilege escalation flaw was found in certain AMQ Broker images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root user, can leverage their membership in the root group to modify the /etc/passwd file. This could allow the attacker to add a new user with any arbitrary UID, including UID 0, leading to full root privileges within the container.

Scores

CVSSScoreVectorSource
3.16.4 MediumCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:Hredhat

Weaknesses

  • CWE-276 Incorrect Default Permissions

Affected Products

ProductVersions
activemq-artemisapache
  • all versionsNot affected
RHEL-9 based Middleware ContainersRed Hat
  • 7.13.2-1 and laterNot affected
RHEL-9 based Middleware ContainersRed Hat
  • 7.13.2-1 and laterNot affected
RHEL-9 based Middleware ContainersRed Hat
  • 7.13.2-1 and laterNot affected
RHEL-9 based Middleware ContainersRed Hat
  • 7.13.2-1 and laterNot affected
RHEL-9 based Middleware ContainersRed Hat
  • 7.13.2-1 and laterNot affected
RHEL-9 based Middleware ContainersRed Hat
  • 7.13.2-1 and laterNot affected
Red Hat AMQ Broker 7Red Hat
    Red Hat AMQ Broker 7Red Hat
      Red Hat AMQ Broker 7Red Hat
        Red Hat AMQ Broker 7Red Hat

          References

          Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.