Lucene search
K

EUVD-2025-19056

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType 
euvd
 euvd
🔗 euvd.enisa.europa.eu👁 2 Views

Flaw in linux-pam allows local users to escalate privileges via symlink attacks and race conditions.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins
Security Bulletin: Vulnerabilities in pam library (CVE-2025-6020, CVE-2025-8941) affect Power HMC.
19 Nov 202508:44
ibm
IBM Security Bulletins
Security Bulletin: Multiple vulnerabilities have been identified with the DS8900F and DS8A00 Hardware Management Console (HMC)
3 Mar 202600:44
ibm
IBM Security Bulletins
Security Bulletin: IBM Observability with Instana (OnPrem) is affected by multiple vulnerabilities
31 Jul 202514:21
ibm
IBM Security Bulletins
Security Bulletin: Vulnerability in pam library (CVE-2025-6020) affects Power HMC.
9 Sep 202507:19
ibm
IBM Security Bulletins
Security Bulletin: Security vulnerabilities due to SQLite3 (CVE-2025-6965), pam_namespace (CVE-2025-6020), systemd-coredump (CVE-2025-4598) and Perl (CVE-2025-40909) packages shipped with IBM CICS TX Advanced.
9 Sep 202517:43
ibm
IBM Security Bulletins
Security Bulletin: Security vulnerabilities due to libxml2, python3, pam and glibc  packages shipped with IBM CICS TX Advanced.
12 Aug 202511:56
ibm
IBM Security Bulletins
Security Bulletin: Multiple security vulnerabilities in RedHat UBI affect IBM Robotic Process Automation for Cloud Pak
20 Oct 202522:01
ibm
IBM Security Bulletins
Security Bulletin: Security vulnerabilities due to libxml2, python3, pam and glibc  packages shipped with IBM CICS TX Standard.
12 Aug 202511:48
ibm
IBM Security Bulletins
Security Bulletin: Multiple security vulnerabilities discovered in RedHat UBI as shipped with IBM Security Verify Directory Server Container
8 Aug 202517:17
ibm
IBM Security Bulletins
Security Bulletin: DataStage on Cloud Pak for Data is vulnerable to improper access control due to the linux-pam package (CVE-2025-6020)
4 Sep 202522:48
ibm
Rows per page
[
  {
    "enisaIdVendor": [
      {
        "id": "c043b6c5-bc77-34af-aede-3c00cc6cc74d",
        "vendor": {
          "name": "Red Hat"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "04aa65b0-cf92-3b9e-bd8c-5e47c58a3f13",
        "product": {
          "name": "Red Hat OpenShift sandboxed containers 1.1"
        },
        "product_version": "patch: sha256:59fb1f7f1653361d94f7d48b42d8fe19ed3263c1c78654837c11f2135544c1ac"
      },
      {
        "id": "0869dc6c-3f4d-3703-a7e5-885ea8c22c6d",
        "product": {
          "name": "RHEL-8 based Middleware Containers"
        },
        "product_version": "patch: 7.13.5-4.1752066672"
      },
      {
        "id": "108a8d3b-3e23-3d4f-a224-c4a3b73646d1",
        "product": {
          "name": "Red Hat Enterprise Linux 8"
        },
        "product_version": "patch: 0:1.3.1-37.el8_10"
      },
      {
        "id": "148165e6-fdbd-3816-9bbd-222a2c0956b2",
        "product": {
          "name": "Red Hat OpenShift distributed tracing 3.6.1"
        },
        "product_version": "patch: sha256:f49a121a3d0ec81f510680cd47c552f82c48889f28d3f14037c582636085410a"
      },
      {
        "id": "1a62beb3-1be9-3a3f-9359-17c641ca6b11",
        "product": {
          "name": "Red Hat OpenShift distributed tracing 3.6.1"
        },
        "product_version": "patch: sha256:e8f3e4113f56564a287bad34721440b00ef600fb99f0dc454dd9c9581e57e696"
      },
      {
        "id": "1d1863eb-25d8-3021-b483-f91818ff47ae",
        "product": {
          "name": "Red Hat OpenShift sandboxed containers 1.1"
        },
        "product_version": "patch: sha256:7b6bd3411ca5ec140968975d4f11f3ec0686b6fbca0ce05288e041ee2e569a89"
      },
      {
        "id": "1f422288-3fec-3edf-8dd6-5365665c6989",
        "product": {
          "name": "Red Hat OpenShift distributed tracing 3.6.1"
        },
        "product_version": "patch: sha256:3d281c9d7fe151c35605aac57a95fec699d20ecea6f4a5ea5b8cdc26a8808695"
      },
      {
        "id": "2894f65a-86c6-3811-b0b5-468e5c1cb1df",
        "product": {
          "name": "Red Hat OpenShift distributed tracing 3.6.1"
        },
        "product_version": "patch: sha256:643b9297fe6bf515d142ad8c857d279aa47854aecd0c9cdb90061185ac78987a"
      },
      {
        "id": "2bd533d2-d0ca-3c7a-b6c8-0bcb48f94a00",
        "product": {
          "name": "Red Hat OpenShift sandboxed containers 1.1"
        },
        "product_version": "patch: sha256:8caeae7ffadf08840a47bc90c390ff402dd7db11457bca48f4e08a11e394be74"
      },
      {
        "id": "36559d2e-29da-37b4-b2ea-57f04f95b015",
        "product": {
          "name": "Red Hat OpenShift distributed tracing 3.6.1"
        },
        "product_version": "patch: sha256:f370f7f76c96e27bd5cd93b993d850c8ce5123a2dc1a03955596db5eee88d411"
      },
      {
        "id": "395c34c4-9114-34db-b16f-3d7dddfa7ead",
        "product": {
          "name": "Red Hat OpenShift distributed tracing 3.6.1"
        },
        "product_version": "patch: sha256:b195c1dd6a6efeff33aaa32e006d0e9da56e638c13fea0383af1cb9c954d543c"
      },
      {
        "id": "3cfd6af4-d0ea-336d-bb77-ba0d6128a323",
        "product": {
          "name": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support"
        },
        "product_version": "patch: 0:1.3.1-14.el8_4.1"
      },
      {
        "id": "402e8024-a4de-3ed6-8f18-93fb6013c59a",
        "product": {
          "name": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions"
        },
        "product_version": "patch: 0:1.3.1-26.el8_8.1"
      },
      {
        "id": "42fead56-7ede-34ab-95b5-7d54029ade96",
        "product": {
          "name": "RHEL-8 based Middleware Containers"
        },
        "product_version": "patch: 7.13.5-4.1752065736"
      },
      {
        "id": "45f012dc-575e-3ea2-97dd-0835a05c9046",
        "product": {
          "name": "Red Hat Discovery 2"
        },
        "product_version": "patch: sha256:c85cfbcaf7888885e57596b7b8bde3894718cfc33326499b24961a66a62cf083"
      },
      {
        "id": "4650bd44-dffe-3dcb-b4a4-cb9448bad927",
        "product": {
          "name": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions"
        },
        "product_version": "patch: 0:1.3.1-16.el8_6.2"
      },
      {
        "id": "4ad0a887-32b6-34ff-ab18-1f84474c1ff2",
        "product": {
          "name": "Red Hat Web Terminal 1.11 on RHEL 9"
        },
        "product_version": "patch: 1.11-19"
      },
      {
        "id": "4b9dac7c-a0ad-3cda-8741-7043e4468bc6",
        "product": {
          "name": "Red Hat OpenShift sandboxed containers 1.1"
        },
        "product_version": "patch: sha256:cead623ceda4048cabaa81c371ed2a8143f5c5514276fca1d71685bd9e6d1e65"
      },
      {
        "id": "5057f2bd-ffc1-3eaa-86c2-5ccdff097a30",
        "product": {
          "name": "Red Hat OpenShift distributed tracing 3.6.1"
        },
        "product_version": "patch: sha256:77dc762cbd33d65add35e10c141b1c5c7c3245dfee3e4d977be7ceeabeee7831"
      },
      {
        "id": "50a31912-9efa-3637-b4e0-d34ec25bf194",
        "product": {
          "name": "Red Hat OpenShift distributed tracing 3.6.1"
        },
        "product_version": "patch: sha256:9eaae087bccf2cedfea26d1c0235cfbbe227f9b8f1eda67dc0b33441e319eb85"
      },
      {
        "id": "51d9974c-99be-345e-8560-56149a678430",
        "product": {
          "name": "Red Hat OpenShift distributed tracing 3.6.1"
        },
        "product_version": "patch: sha256:e0319f6e008b9acca2b111406b25238d1e75ca95b18b09365886a617d2a38882"
      },
      {
        "id": "52dcc4f3-d563-3c49-99c5-d8a752fce869",
        "product": {
          "name": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support"
        },
        "product_version": "patch: 0:1.3.1-16.el8_6.2"
      },
      {
        "id": "55f62cd7-99b7-38df-a746-d1dc73629fe2",
        "product": {
          "name": "Red Hat Enterprise Linux 9.4 Extended Update Support"
        },
        "product_version": "patch: 0:1.5.1-24.el9_4"
      },
      {
        "id": "55fde78b-d496-3467-92de-774180c55d5c",
        "product": {
          "name": "Red Hat OpenShift distributed tracing 3.6.1"
        },
        "product_version": "patch: sha256:c18d414518b1eaed33a17a13f6c0273ab14405dd9569c169e6839026330e0895"
      },
      {
        "id": "5a8fa77a-111a-3ede-9105-c006d825a76e",
        "product": {
          "name": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service"
        },
        "product_version": "patch: 0:1.3.1-26.el8_8.1"
      },
      {
        "id": "5aec6617-0f15-3a2c-9452-603df009bf68",
        "product": {
          "name": "Red Hat Enterprise Linux 9"
        },
        "product_version": "patch: 0:1.5.1-26.el9_6"
      },
      {
        "id": "5b629096-be0b-3440-91ca-fc0a54c2a716",
        "product": {
          "name": "Red Hat OpenShift distributed tracing 3.6.1"
        },
        "product_version": "patch: sha256:39378c1e705973edca5f52f422b5c3693aaf5d2f22fb320d7676086b2cf846ba"
      },
      {
        "id": "5bc7b0dd-2c86-3940-ae6b-b457647cd910",
        "product": {
          "name": "Red Hat OpenShift distributed tracing 3.6.1"
        },
        "product_version": "patch: sha256:1faa5daf085b0844740653d96711b3fcfa766a77224fb523335d877b8e314b57"
      },
      {
        "id": "5fbe4ea3-5bd3-30cc-a402-f91702d1a924",
        "product": {
          "name": "Red Hat OpenShift distributed tracing 3.6.1"
        },
        "product_version": "patch: sha256:faad36621dda484f7883da35873b9f288f6c7a1332815bc857531de032c38068"
      },
      {
        "id": "640f338e-8c77-357a-845b-6fb041ca4656",
        "product": {
          "name": "Red Hat Enterprise Linux 8.2 Advanced Update Support"
        },
        "product_version": "patch: 0:1.3.1-8.el8_2.1"
      },
      {
        "id": "66777ffa-560f-3066-862d-813588942387",
        "product": {
          "name": "Red Hat OpenShift distributed tracing 3.6.1"
        },
        "product_version": "patch: sha256:2a37885dbd9735167854119a546f9ce1b37454a2b57d283fbd8da890c01db767"
      },
      {
        "id": "67dec120-9b44-3b3a-a5b2-a78893b72ee1",
        "product": {
          "name": "Red Hat OpenShift distributed tracing 3.6.1"
        },
        "product_version": "patch: sha256:cd011375e307f5cef74d4819f37567f6291259eb1d2795f0cf4b8cb8a90004e0"
      },
      {
        "id": "68770df9-e3e0-3db1-9bf6-b9552e4eb54f",
        "product": {
          "name": "Red Hat OpenShift distributed tracing 3.6.1"
        },
        "product_version": "patch: sha256:d1425fca630adab3f66b30eaf47010c2da892e2d635a721c493c1751f98f69b3"
      },
      {
        "id": "68c2c745-7986-366f-9a64-591d2c420253",
        "product": {
          "name": "Red Hat Discovery 2"
        },
        "product_version": "patch: sha256:c499a099e03c7488ffe50529a34723ade191a89fcfc59d1f0edd01db2b579ca3"
      },
      {
        "id": "6d418021-5ef5-30a3-958f-8720f4622d6d",
        "product": {
          "name": "Red Hat Web Terminal 1.11 on RHEL 9"
        },
        "product_version": "patch: 1.11-8"
      },
      {
        "id": "6e12822c-8a2a-3f6e-8e7f-564ea31a8877",
        "product": {
          "name": "Red Hat OpenShift distributed tracing 3.6.1"
        },
        "product_version": "patch: sha256:64a3f8700431671b0bf37a5e6963a2fcf0fac77a10d56854f8649b0eb407cbb3"
      },
      {
        "id": "728ca980-3117-3557-be14-1c6f5ce08a21",
        "product": {
          "name": "Red Hat OpenShift distributed tracing 3.6.1"
        },
        "product_version": "patch: sha256:281913677308b5a7f0f834161ca1c1cf22e2686616f60057ac8ae61627f66861"
      },
      {
        "id": "7354d145-6c88-3f77-a075-dd345fd87b0f",
        "product": {
          "name": "Red Hat OpenShift sandboxed containers 1.1"
        },
        "product_version": "patch: sha256:9ff002e628e5646b5ab3cc9201087847bea29569b4a1bc135b89d5c1a5f0a422"
      },
      {
        "id": "798326e0-a921-360a-b8be-07892dbb765e",
        "product": {
          "name": "RHEL-8 based Middleware Containers"
        },
        "product_version": "patch: 7.13.5-4.1752065731"
      },
      {
        "id": "79f4a711-da31-3297-9c4d-ec660a9cd673",
        "product": {
          "name": "RHEL-8 based Middleware Containers"
        },
        "product_version": "patch: 7.13.5-4.1752065732"
      },
      {
        "id": "7bfa45b9-5195-3b13-bfcb-4d1a3e632256",
        "product": {
          "name": "Red Hat OpenShift distributed tracing 3.6.1"
        },
        "product_version": "patch: sha256:18ca3c44f6f25cbfe67842a0b2c9491a8247a64dbd166f188dccf0a84cfd3e67"
      },
      {
        "id": "7d2d948e-2632-393d-a15d-a361333ee79e",
        "product": {
          "name": "Red Hat OpenShift distributed tracing 3.6.1"
        },
        "product_version": "patch: sha256:5bb83d0b9387f51291c3977d37aab8a19e978a7dccf3d72cae0dabb66bd26df4"
      },
      {
        "id": "81dc8155-e83b-36e1-8e53-f2d24e45d735",
        "product": {
          "name": "Red Hat OpenShift distributed tracing 3.6.1"
        },
        "product_version": "patch: sha256:c34a7574e3c6af4c82bee38e581d047613f8931c12d89924764f46b565bf3117"
      },
      {
        "id": "8c282922-59bf-3f1f-8f85-02a3e1982b31",
        "product": {
          "name": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions"
        },
        "product_version": "patch: 0:1.5.1-15.el9_2.1"
      },
      {
        "id": "8e99be0a-343e-3eed-820b-9d5af27dc01b",
        "product": {
          "name": "Red Hat OpenShift distributed tracing 3.6.1"
        },
        "product_version": "patch: sha256:93a3f6c10968431079bf0b637b029406d6a0bdc9521f3a02b062af7a3539995e"
      },
      {
        "id": "9910617a-be97-36c9-bf46-e3cb8acd4542",
        "product": {
          "name": "Red Hat OpenShift distributed tracing 3.6.1"
        },
        "product_version": "patch: sha256:b1995ead9af6e923bd55ebdbed4c371b7f8bb58c46d6a36e9a25f9296f09a3f4"
      },
      {
        "id": "a0eb8fcd-302e-31b9-b487-28c48bd6b533",
        "product": {
          "name": "Red Hat OpenShift distributed tracing 3.6.1"
        },
        "product_version": "patch: sha256:8f2da1e0fc45a36cffbe91f9a1c4449eb0c71671865b7194951ad727c9f7b064"
      },
      {
        "id": "a428dfdf-89d6-3ecc-8494-c2c2063ba42b",
        "product": {
          "name": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions"
        },
        "product_version": "patch: 0:1.5.1-9.el9_0.2"
      },
      {
        "id": "a464f90a-e761-382e-9fe9-192394597420",
        "product": {
          "name": "Red Hat Enterprise Linux 8"
        },
        "product_version": "patch: 0:1.3.1-38.el8_10"
      },
      {
        "id": "ab061087-123a-37c3-ab12-23fd3653fd19",
        "product": {
          "name": "Red Hat Discovery 2"
        },
        "product_version": "patch: sha256:bd9cb502def3153c193713b56372694cb555a71b38d4fc0fd9d021bccc5602de"
      },
      {
        "id": "ab86e307-a078-3c58-aebb-ce83e89b8dc2",
        "product": {
          "name": "RHEL-8 based Middleware Containers"
        },
        "product_version": "patch: 7.13.5-4.1752065755"
      },
      {
        "id": "ac5a0b1a-9ec1-3812-a33c-9e3c9ddfa2a5",
        "product": {
          "name": "Red Hat OpenShift distributed tracing 3.6.1"
        },
        "product_version": "patch: sha256:1feaee0df48953c919df3ceb2dde3aa10345e69c0b1a7186a8a0fd6ab9b300f6"
      },
      {
        "id": "adf9fd29-8e2c-38f0-807e-f86d106a2e20",
        "product": {
          "name": "Red Hat OpenShift distributed tracing 3.6.1"
        },
        "product_version": "patch: sha256:46090c79b193de2028b4c994d3013fec7102f3b10673ecd09b017be4de7bf9f6"
      },
      {
        "id": "aebdf080-71de-380c-a7a3-ad9db8b850aa",
        "product": {
          "name": "Red Hat OpenShift distributed tracing 3.6.1"
        },
        "product_version": "patch: sha256:34851d4dd94a887b27d0937a1238d09ac370b4ec06382fe880796dac86c4aa3e"
      },
      {
        "id": "b3a1d298-c1f6-3a5a-b0ba-aa1ee8594279",
        "product": {
          "name": "Red Hat OpenShift distributed tracing 3.6.1"
        },
        "product_version": "patch: sha256:3e188c2073ae9099a3057c55d9366b6d1ec290b0016afa85f632c00cc4b778fa"
      },
      {
        "id": "b4678595-132e-3437-896d-8a8ab8042c17",
        "product": {
          "name": "RHEL-8 based Middleware Containers"
        },
        "product_version": "patch: 7.13.5-3.1752065737"
      },
      {
        "id": "be869fc4-9649-37c6-8797-4e6aaeefae22",
        "product": {
          "name": "Red Hat OpenShift distributed tracing 3.6.1"
        },
        "product_version": "patch: sha256:e5302b8da7585229e8c123fa3a84720e46bca9abd76acfc31ae0273f3fd4f800"
      },
      {
        "id": "c3764489-6157-3fa5-906a-666a2fd72f43",
        "product": {
          "name": "Red Hat Enterprise Linux 9"
        },
        "product_version": "patch: 0:1.5.1-25.el9_6"
      },
      {
        "id": "c545ad9a-3bca-33e9-969b-e1ca6101cec8",
        "product": {
          "name": "Red Hat Discovery 2"
        },
        "product_version": "patch: sha256:1c67d8d526ab4f2854947f7dccd8752a2efd414c0f1cbab17706fa91147e7cda"
      },
      {
        "id": "c9b32573-d7bb-347e-80bd-4a8a0a37bf41",
        "product": {
          "name": "Red Hat OpenShift distributed tracing 3.6.1"
        },
        "product_version": "patch: sha256:cbfcac41c1bd3a06e874433089e231dfd2a944dee139906d9949e2d68b71cfc3"
      },
      {
        "id": "ca678897-7cb4-3c86-b6bb-722705607b87",
        "product": {
          "name": "Red Hat OpenShift distributed tracing 3.6.1"
        },
        "product_version": "patch: sha256:40535c017d2730645c57c44b32b4df1613585cc19c052fe472ccbf543a659c42"
      },
      {
        "id": "cf18246c-bfd2-3521-9545-6d13a12b16df",
        "product": {
          "name": "Red Hat OpenShift distributed tracing 3.6.1"
        },
        "product_version": "patch: sha256:3a3719e3683051967d548de708e178640f848933c99efc3955ca915a46bcb675"
      },
      {
        "id": "d083ea3f-d075-3fb4-be90-74e30b89a0b3",
        "product": {
          "name": "Red Hat Enterprise Linux 7 Extended Lifecycle Support"
        },
        "product_version": "patch: 0:1.1.8-23.el7_9.1"
      },
      {
        "id": "d10895e1-6c76-3729-a5b2-0d529274fed4",
        "product": {
          "name": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service"
        },
        "product_version": "patch: 0:1.3.1-16.el8_6.2"
      },
      {
        "id": "d91588dd-bf0d-3110-beb5-b0223f2fdb29",
        "product": {
          "name": "Red Hat Web Terminal 1.12 on RHEL 9"
        },
        "product_version": "patch: 1.12-4"
      },
      {
        "id": "d973d04d-ee8c-3515-95b2-b9c1d8a1cd04",
        "product": {
          "name": "Red Hat OpenShift sandboxed containers 1.1"
        },
        "product_version": "patch: sha256:24722900db1425bf0c27f6ad6f3fb7d79ff9ebc433bdab58423fa71bab76122b"
      },
      {
        "id": "dfe4e10b-44ab-300b-9fbb-83e681dd39ae",
        "product": {
          "name": "Red Hat OpenShift distributed tracing 3.6.1"
        },
        "product_version": "patch: sha256:54c5403a8a9e0300233e75a04318013e9dbe3d894be691927d27dc2fe53fddc0"
      },
      {
        "id": "e261d94f-59e1-32cb-a443-62239218ae67",
        "product": {
          "name": "RHEL-8 based Middleware Containers"
        },
        "product_version": "patch: 7.13.5-2.1752065733"
      },
      {
        "id": "e452bcc5-91ca-3b52-a63d-16aac1a14997",
        "product": {
          "name": "RHEL-8 based Middleware Containers"
        },
        "product_version": "patch: 7.13.5-25"
      },
      {
        "id": "e5935f83-4494-3e4f-b2b2-5b9b6d2aeb8c",
        "product": {
          "name": "Red Hat OpenShift sandboxed containers 1.1"
        },
        "product_version": "patch: sha256:f5e1602d72177d77f1b879c76e6f6cfbc2979c136c06ca9f03ea97ffb369b7a6"
      },
      {
        "id": "e71f7981-bbc1-353f-ac89-93b4cacd1043",
        "product": {
          "name": "Red Hat OpenShift distributed tracing 3.6.1"
        },
        "product_version": "patch: sha256:d0783f1725e2452c74dd687ac3238634851b9e587cd5c1134e790a43cdd7cad5"
      },
      {
        "id": "fdd0ddf3-5ffd-383f-a850-94f9f678123f",
        "product": {
          "name": "Red Hat OpenShift sandboxed containers 1.1"
        },
        "product_version": "patch: sha256:8f29671308ca658e32e97d5c3b482f7541aae1bca1b71f39b3276a9a334d8108"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

03 Oct 2025 20:07Current
7.8High risk
Vulners AI Score7.8
CVSS 3.17.8
EPSS0.00072
SSVC
2