CVE-2025-58712

Amq: privilege escalation via excessive /etc/passwd permissions

View on CVE.org

Published Oct 22, 2025 CVSS 3.1 · 6.4 Medium EPSS < 1% KEV · Not listed

Description

A container privilege escalation flaw was found in certain AMQ Broker images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root user, can leverage their membership in the root group to modify the /etc/passwd file. This could allow the attacker to add a new user with any arbitrary UID, including UID 0, leading to full root privileges within the container.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

apache

activemq-artemis

unknown

Version	Status	Constraints
`0`	unaffected	< *

Red Hat

RHEL-9 based Middleware Containers

affected

Version	Status	Constraints
`7.13.2-1`	unaffected	< *

Red Hat

RHEL-9 based Middleware Containers

affected

Version	Status	Constraints
`7.13.2-1`	unaffected	< *

Red Hat

RHEL-9 based Middleware Containers

affected

Version	Status	Constraints
`7.13.2-1`	unaffected	< *

Red Hat

RHEL-9 based Middleware Containers

affected

Version	Status	Constraints
`7.13.2-1`	unaffected	< *

Red Hat

RHEL-9 based Middleware Containers

affected

Version	Status	Constraints
`7.13.2-1`	unaffected	< *

Red Hat

RHEL-9 based Middleware Containers

affected

Version	Status	Constraints
`7.13.2-1`	unaffected	< *

Red Hat Red Hat AMQ Broker 7 affected —

Red Hat Red Hat AMQ Broker 7 affected —

Red Hat Red Hat AMQ Broker 7 affected —

Red Hat Red Hat AMQ Broker 7 affected —

No data.

No data.

No data available yet.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.205% probability within 30 days)

Exploitation none

Automatable no

Technical Impact total

References

Link	Providers
https://access.redhat.com/errata/RHSA-2025:17562
https://access.redhat.com/security/cve/CVE-2025-58712
https://bugzilla.redhat.com/show_bug.cgi?id=2394418
https://nvd.nist.gov/vuln/detail/CVE-2025-58712
https://www.cve.org/CVERecord?id=CVE-2025-58712

History

Mar 7, 2026 12:00 AM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics	cvssV3_1 `{'score': 5.2, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:L'}`	cvssV3_1 `{'score': 6.4, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'}`

Oct 22, 2025 7:15 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Oct 22, 2025 6:30 PM Description updated. Title updated. First appearance in the feed. Affected versions updated. Affected vendors updated. Added references View changes

Type	Values Removed	Values Added
Description	No description is available for this CVE.	A container privilege escalation flaw was found in certain AMQ Broker images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root user, can leverage their membership in the root group to modify the /etc/passwd file. This could allow the attacker to add a new user with any arbitrary UID, including UID 0, leading to full root privileges within the container.
Title	amq: privilege escalation via excessive /etc/passwd permissions	Amq: privilege escalation via excessive /etc/passwd permissions
First Time appeared		Redhat Redhat amq Broker Redhat rhosemc
CPEs		cpe:/a:redhat:amq_broker:7 cpe:/a:redhat:rhosemc:1.0::el9
Vendors & Products		Redhat Redhat amq Broker Redhat rhosemc
References		https://access.redhat.com/errata/RHSA-2025:17562 https://access.redhat.com/security/cve/CVE-2025-58712 https://bugzilla.redhat.com/show_bug.cgi?id=2394418

Oct 8, 2025 12:15 AM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		No description is available for this CVE.
Title		amq: privilege escalation via excessive /etc/passwd permissions
Weaknesses		CWE-276
References		https://nvd.nist.gov/vuln/detail/CVE-2025-58712 https://www.cve.org/CVERecord?id=CVE-2025-58712
Metrics	threat_severity `None`	cvssV3_1 `{'score': 5.2, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:L'}` threat_severity `Moderate`

Subscriptions

Redhat Amq Broker Rhosemc

Weaknesses

CWE-276

Sources

CVE record Updated: Mar 6, 2026, 11:45 PM

Status: PUBLISHED
Assigner: redhat
Published: Oct 22, 2025, 6:19 PM
Updated: Mar 6, 2026, 11:45 PM
Reserved: Sep 3, 2025, 3:20 PM

View source JSON

Vulnrichment Updated: Oct 22, 2025, 6:36 PM

Updated: Oct 22, 2025, 6:36 PM

NVD Updated: Oct 18, 2026, 9:10 PM

Status: Deferred
Published: Oct 22, 2025, 7:15 PM
Modified: Oct 18, 2026, 9:10 PM

View source JSON

Red Hat Updated: Oct 7, 2025, 2:26 PM

Severity: Moderate
Public date: Oct 7, 2025, 2:26 PM

View source Bugzilla JSON

OpenCVE enrichment No data

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-58712", "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "state": "PUBLISHED", "assignerShortName": "redhat", "dateReserved": "2025-09-03T15:20:52.036Z", "datePublished": "2025-10-22T18:19:06.763Z", "dateUpdated": "2026-03-06T23:45:29.098Z"}, "containers": {"cna": {"title": "Amq: privilege escalation via excessive /etc/passwd permissions", "metrics": [{"other": {"content": {"value": "Moderate", "namespace": "https://access.redhat.com/security/updates/classification/"}, "type": "Red Hat severity rating"}}, {"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS"}], "descriptions": [{"lang": "en", "value": "A container privilege escalation flaw was found in certain AMQ Broker images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root user, can leverage their membership in the root group to modify the /etc/passwd file. This could allow the attacker to add a new user with any arbitrary UID, including UID 0, leading to full root privileges within the container."}], "affected": [{"vendor": "apache", "product": "activemq-artemis", "versions": [{"status": "unaffected", "version": "0", "lessThan": "*", "versionType": "semver"}], "packageName": "activemq-artemis", "collectionURL": "https://github.com/apache/activemq-artemis", "defaultStatus": "unknown"}, {"vendor": "Red Hat", "product": "RHEL-9 based Middleware Containers", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "amq7/amq-broker-init-rhel9", "defaultStatus": "affected", "versions": [{"version": "7.13.2-1", "lessThan": "*", "versionType": "rpm", "status": "unaffected"}], "cpes": ["cpe:/a:redhat:rhosemc:1.0::el9"]}, {"vendor": "Red Hat", "product": "RHEL-9 based Middleware Containers", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "amq7/amq-broker-rhel9", "defaultStatus": "affected", "versions": [{"version": "7.13.2-1", "lessThan": "*", "versionType": "rpm", "status": "unaffected"}], "cpes": ["cpe:/a:redhat:rhosemc:1.0::el9"]}, {"vendor": "Red Hat", "product": "RHEL-9 based Middleware Containers", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "amq7/amq-broker-rhel9-operator", "defaultStatus": "affected", "versions": [{"version": "7.13.2-1", "lessThan": "*", "versionType": "rpm", "status": "unaffected"}], "cpes": ["cpe:/a:redhat:rhosemc:1.0::el9"]}, {"vendor": "Red Hat", "product": "RHEL-9 based Middleware Containers", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "amq7/amq-broker-rhel9-operator-bundle", "defaultStatus": "affected", "versions": [{"version": "7.13.2-1", "lessThan": "*", "versionType": "rpm", "status": "unaffected"}], "cpes": ["cpe:/a:redhat:rhosemc:1.0::el9"]}, {"vendor": "Red Hat", "product": "RHEL-9 based Middleware Containers", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "amq7-tech-preview/amq-broker-console-plugin-rhel9", "defaultStatus": "affected", "versions": [{"version": "7.13.2-1", "lessThan": "*", "versionType": "rpm", "status": "unaffected"}], "cpes": ["cpe:/a:redhat:rhosemc:1.0::el9"]}, {"vendor": "Red Hat", "product": "RHEL-9 based Middleware Containers", "collectionURL": "https://catalog.redhat.com/software/containers/", "packageName": "amq7-tech-preview/amq-broker-jolokia-api-server-rhel9", "defaultStatus": "affected", "versions": [{"version": "7.13.2-1", "lessThan": "*", "versionType": "rpm", "status": "unaffected"}], "cpes": ["cpe:/a:redhat:rhosemc:1.0::el9"]}, {"vendor": "Red Hat", "product": "Red Hat AMQ Broker 7", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "amq-broker-init-rhel8", "defaultStatus": "affected", "cpes": ["cpe:/a:redhat:amq_broker:7"]}, {"vendor": "Red Hat", "product": "Red Hat AMQ Broker 7", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "amq-broker-init-rhel9", "defaultStatus": "affected", "cpes": ["cpe:/a:redhat:amq_broker:7"]}, {"vendor": "Red Hat", "product": "Red Hat AMQ Broker 7", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "amq-broker-rhel8", "defaultStatus": "affected", "cpes": ["cpe:/a:redhat:amq_broker:7"]}, {"vendor": "Red Hat", "product": "Red Hat AMQ Broker 7", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "packageName": "amq-broker-rhel9", "defaultStatus": "affected", "cpes": ["cpe:/a:redhat:amq_broker:7"]}], "references": [{"url": "https://access.redhat.com/errata/RHSA-2025:17562", "name": "RHSA-2025:17562", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/security/cve/CVE-2025-58712", "tags": ["vdb-entry", "x_refsource_REDHAT"]}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2394418", "name": "RHBZ#2394418", "tags": ["issue-tracking", "x_refsource_REDHAT"]}], "datePublic": "2025-10-07T14:26:00.000Z", "problemTypes": [{"descriptions": [{"cweId": "CWE-276", "description": "Incorrect Default Permissions", "lang": "en", "type": "CWE"}]}], "x_redhatCweChain": "CWE-276: Incorrect Default Permissions", "timeline": [{"lang": "en", "time": "2025-09-10T17:28:57.860Z", "value": "Reported to Red Hat."}, {"lang": "en", "time": "2025-10-07T14:26:00.000Z", "value": "Made public."}], "credits": [{"lang": "en", "value": "Red Hat would like to thank Antony Di Scala and Mike Whale for reporting this issue."}], "providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2026-03-06T23:45:29.098Z"}, "x_generator": {"engine": "cvelib 1.8.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-10-22T18:25:27.188744Z", "id": "CVE-2025-58712", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-22T18:37:06.272Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-58712", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-10-22T18:25:27.188744Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-22T18:36:57.927Z"}}], "cna": {"title": "Amq: privilege escalation via excessive /etc/passwd permissions", "credits": [{"lang": "en", "value": "Red Hat would like to thank Antony Di Scala and Mike Whale for reporting this issue."}], "metrics": [{"other": {"type": "Red Hat severity rating", "content": {"value": "Moderate", "namespace": "https://access.redhat.com/security/updates/classification/"}}}, {"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.4, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "apache", "product": "activemq-artemis", "versions": [{"status": "unaffected", "version": "0", "lessThan": "*", "versionType": "semver"}], "packageName": "activemq-artemis", "collectionURL": "https://github.com/apache/activemq-artemis", "defaultStatus": "unknown"}, {"cpes": ["cpe:/a:redhat:rhosemc:1.0::el9"], "vendor": "Red Hat", "product": "RHEL-9 based Middleware Containers", "versions": [{"status": "unaffected", "version": "7.13.2-1", "lessThan": "*", "versionType": "rpm"}], "packageName": "amq7/amq-broker-init-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:rhosemc:1.0::el9"], "vendor": "Red Hat", "product": "RHEL-9 based Middleware Containers", "versions": [{"status": "unaffected", "version": "7.13.2-1", "lessThan": "*", "versionType": "rpm"}], "packageName": "amq7/amq-broker-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:rhosemc:1.0::el9"], "vendor": "Red Hat", "product": "RHEL-9 based Middleware Containers", "versions": [{"status": "unaffected", "version": "7.13.2-1", "lessThan": "*", "versionType": "rpm"}], "packageName": "amq7/amq-broker-rhel9-operator", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:rhosemc:1.0::el9"], "vendor": "Red Hat", "product": "RHEL-9 based Middleware Containers", "versions": [{"status": "unaffected", "version": "7.13.2-1", "lessThan": "*", "versionType": "rpm"}], "packageName": "amq7/amq-broker-rhel9-operator-bundle", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:rhosemc:1.0::el9"], "vendor": "Red Hat", "product": "RHEL-9 based Middleware Containers", "versions": [{"status": "unaffected", "version": "7.13.2-1", "lessThan": "*", "versionType": "rpm"}], "packageName": "amq7-tech-preview/amq-broker-console-plugin-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:rhosemc:1.0::el9"], "vendor": "Red Hat", "product": "RHEL-9 based Middleware Containers", "versions": [{"status": "unaffected", "version": "7.13.2-1", "lessThan": "*", "versionType": "rpm"}], "packageName": "amq7-tech-preview/amq-broker-jolokia-api-server-rhel9", "collectionURL": "https://catalog.redhat.com/software/containers/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:amq_broker:7"], "vendor": "Red Hat", "product": "Red Hat AMQ Broker 7", "packageName": "amq-broker-init-rhel8", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:amq_broker:7"], "vendor": "Red Hat", "product": "Red Hat AMQ Broker 7", "packageName": "amq-broker-init-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:amq_broker:7"], "vendor": "Red Hat", "product": "Red Hat AMQ Broker 7", "packageName": "amq-broker-rhel8", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}, {"cpes": ["cpe:/a:redhat:amq_broker:7"], "vendor": "Red Hat", "product": "Red Hat AMQ Broker 7", "packageName": "amq-broker-rhel9", "collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "defaultStatus": "affected"}], "timeline": [{"lang": "en", "time": "2025-09-10T17:28:57.860Z", "value": "Reported to Red Hat."}, {"lang": "en", "time": "2025-10-07T14:26:00.000Z", "value": "Made public."}], "datePublic": "2025-10-07T14:26:00.000Z", "references": [{"url": "https://access.redhat.com/errata/RHSA-2025:17562", "name": "RHSA-2025:17562", "tags": ["vendor-advisory", "x_refsource_REDHAT"]}, {"url": "https://access.redhat.com/security/cve/CVE-2025-58712", "tags": ["vdb-entry", "x_refsource_REDHAT"]}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2394418", "name": "RHBZ#2394418", "tags": ["issue-tracking", "x_refsource_REDHAT"]}], "x_generator": {"engine": "cvelib 1.8.0"}, "descriptions": [{"lang": "en", "value": "A container privilege escalation flaw was found in certain AMQ Broker images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root user, can leverage their membership in the root group to modify the /etc/passwd file. This could allow the attacker to add a new user with any arbitrary UID, including UID 0, leading to full root privileges within the container."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-276", "description": "Incorrect Default Permissions"}]}], "providerMetadata": {"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "shortName": "redhat", "dateUpdated": "2026-03-06T23:45:29.098Z"}, "x_redhatCweChain": "CWE-276: Incorrect Default Permissions"}}, "cveMetadata": {"cveId": "CVE-2025-58712", "state": "PUBLISHED", "dateUpdated": "2026-03-06T23:45:29.098Z", "dateReserved": "2025-09-03T15:20:52.036Z", "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749", "datePublished": "2025-10-22T18:19:06.763Z", "assignerShortName": "redhat"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"collectionURL": "https://github.com/apache/activemq-artemis", "defaultStatus": "unknown", "packageName": "activemq-artemis", "product": "activemq-artemis", "vendor": "apache", "versions": [{"lessThan": "*", "status": "unaffected", "version": "0", "versionType": "semver"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:rhosemc:1.0::el9"], "defaultStatus": "affected", "packageName": "amq7/amq-broker-init-rhel9", "product": "RHEL-9 based Middleware Containers", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "7.13.2-1", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:rhosemc:1.0::el9"], "defaultStatus": "affected", "packageName": "amq7/amq-broker-rhel9", "product": "RHEL-9 based Middleware Containers", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "7.13.2-1", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:rhosemc:1.0::el9"], "defaultStatus": "affected", "packageName": "amq7/amq-broker-rhel9-operator", "product": "RHEL-9 based Middleware Containers", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "7.13.2-1", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:rhosemc:1.0::el9"], "defaultStatus": "affected", "packageName": "amq7/amq-broker-rhel9-operator-bundle", "product": "RHEL-9 based Middleware Containers", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "7.13.2-1", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:rhosemc:1.0::el9"], "defaultStatus": "affected", "packageName": "amq7-tech-preview/amq-broker-console-plugin-rhel9", "product": "RHEL-9 based Middleware Containers", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "7.13.2-1", "versionType": "rpm"}]}, {"collectionURL": "https://catalog.redhat.com/software/containers/", "cpes": ["cpe:/a:redhat:rhosemc:1.0::el9"], "defaultStatus": "affected", "packageName": "amq7-tech-preview/amq-broker-jolokia-api-server-rhel9", "product": "RHEL-9 based Middleware Containers", "vendor": "Red Hat", "versions": [{"lessThan": "*", "status": "unaffected", "version": "7.13.2-1", "versionType": "rpm"}]}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:amq_broker:7"], "defaultStatus": "affected", "packageName": "amq-broker-init-rhel8", "product": "Red Hat AMQ Broker 7", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:amq_broker:7"], "defaultStatus": "affected", "packageName": "amq-broker-init-rhel9", "product": "Red Hat AMQ Broker 7", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:amq_broker:7"], "defaultStatus": "affected", "packageName": "amq-broker-rhel8", "product": "Red Hat AMQ Broker 7", "vendor": "Red Hat"}, {"collectionURL": "https://access.redhat.com/downloads/content/package-browser/", "cpes": ["cpe:/a:redhat:amq_broker:7"], "defaultStatus": "affected", "packageName": "amq-broker-rhel9", "product": "Red Hat AMQ Broker 7", "vendor": "Red Hat"}], "source": "secalert@redhat.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A container privilege escalation flaw was found in certain AMQ Broker images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root user, can leverage their membership in the root group to modify the /etc/passwd file. This could allow the attacker to add a new user with any arbitrary UID, including UID 0, leading to full root privileges within the container."}, {"lang": "es", "value": "Se encontr\u00f3 una falla de escalada de privilegios de contenedor en ciertas im\u00e1genes de AMQ Broker. Este problema se origina en la creaci\u00f3n del archivo /etc/p4ssd con permisos de escritura para el grupo durante el tiempo de compilaci\u00f3n. En ciertas condiciones, un atacante que puede ejecutar comandos dentro de un contenedor afectado, incluso como un usuario no-root, puede aprovechar su pertenencia al grupo root para modificar el archivo /etc/p4ssd. Esto podr\u00eda permitir al atacante a\u00f1adir un nuevo usuario con cualquier UID arbitrario, incluyendo UID 0, lo que lleva a privilegios de root completos dentro del contenedor."}], "id": "CVE-2025-58712", "lastModified": "2026-10-18T21:10:00.120", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 0.5, "impactScore": 5.9, "source": "secalert@redhat.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-58712", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2025-10-22T18:25:27.188744Z", "version": "2.0.3"}}]}, "published": "2025-10-22T19:15:34.270", "references": [{"source": "secalert@redhat.com", "url": "https://access.redhat.com/errata/RHSA-2025:17562"}, {"source": "secalert@redhat.com", "url": "https://access.redhat.com/security/cve/CVE-2025-58712"}, {"source": "secalert@redhat.com", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2394418"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-276"}], "source": "secalert@redhat.com", "type": "Secondary"}]}