2 matches found
CVE-2025-57850 Codeready-ws: privilege escalation via excessive /etc/passwd permissions
A container privilege escalation flaw was found in certain CodeReady Workspaces images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a...
6.4CVSS6.9AI score0.00181EPSS
SaveExploits0References2
PT-2025-48768
A container privilege escalation flaw was found in certain CodeReady Workspaces images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a...
5.2CVSS7.2AI score0.00181EPSS
SaveExploits0References3
20