2 matches found
CVE-2025-57850 Codeready-ws: privilege escalation via excessive /etc/passwd permissions
A container privilege escalation flaw was found in certain CodeReady Workspaces images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a...
6.4CVSS6AI score0.00178EPSS
SaveExploits0References2
PT-2025-48768
Name of the Vulnerable Software and Affected Versions CodeReady Workspaces affected versions not specified Description A container privilege escalation flaw exists in certain CodeReady Workspaces images. The issue arises from the /etc/passwd file being created with group-writable permissions duri...
6.4CVSS6.1AI score0.00178EPSS
SaveExploits0References5
20