CVE-2025-6020
Estado: AplazadaAlta (7.8)—
A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Puntuación base: 7.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.46%
- Percentil entre todas las CVEs puntuadas: 38
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
🎯 Técnicas ATT&CK
Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.
- Explotación
T1068Exploitation for Privilege Escalationprivilege escalation95 % - Impacto principal
T1548.004Elevated Execution with Promptprivilege escalation90 % - Impacto secundario
T1005Data from Local Systemcollection75 %
Vector CVSS AV:L/PR:L/UI:N indica acceso local sin interacción (T1068). El texto explica escalada de privilegios a root mediante ataques de symlink y race conditions. CWE-22 (path traversal) permite lectura/modificación de datos sensibles.
Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.
🛡️ Mitigaciones ATT&CK que cubren estas técnicas
Tecnologías afectadas (1)
⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.
CWE
- CWE-22
Referencias
- https://access.redhat.com/errata/RHSA-2025:10024
- https://access.redhat.com/errata/RHSA-2025:10027
- https://access.redhat.com/errata/RHSA-2025:10180
- https://access.redhat.com/errata/RHSA-2025:10354
- https://access.redhat.com/errata/RHSA-2025:10357
- https://access.redhat.com/errata/RHSA-2025:10358
- https://access.redhat.com/errata/RHSA-2025:10359
- https://access.redhat.com/errata/RHSA-2025:10361
- https://access.redhat.com/errata/RHSA-2025:10362
- https://access.redhat.com/errata/RHSA-2025:10735
- https://access.redhat.com/errata/RHSA-2025:10823
- https://access.redhat.com/errata/RHSA-2025:11386
- https://access.redhat.com/errata/RHSA-2025:11487
- https://access.redhat.com/errata/RHSA-2025:14557
- https://access.redhat.com/errata/RHSA-2025:15099
- https://access.redhat.com/errata/RHSA-2025:15709
- https://access.redhat.com/errata/RHSA-2025:15827
- https://access.redhat.com/errata/RHSA-2025:15828
- https://access.redhat.com/errata/RHSA-2025:16524
- https://access.redhat.com/errata/RHSA-2025:17181
- https://access.redhat.com/errata/RHSA-2025:18219
- https://access.redhat.com/errata/RHSA-2025:20181
- https://access.redhat.com/errata/RHSA-2025:21885
- https://access.redhat.com/errata/RHSA-2025:22019
- https://access.redhat.com/errata/RHSA-2025:9526
- https://access.redhat.com/errata/RHSA-2026:0934
- https://access.redhat.com/security/cve/CVE-2025-6020
- https://bugzilla.redhat.com/show_bug.cgi?id=2372512
- https://github.com/linux-pam/linux-pam/security/advisories/GHSA-f9p8-gjr4-j9gx
- http://www.openwall.com/lists/oss-security/2025/06/17/1
- https://lists.debian.org/debian-lts-announce/2025/09/msg00021.html
- https://cert-portal.siemens.com/productcert/html/ssa-577017.html
JSON original (NVD)
Mostrar
{
"id": "CVE-2025-6020",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2025-6020",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"version": "2.0.3",
"timestamp": "2025-06-17T13:30:00.379966Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "secalert@redhat.com",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.8,
"attackVector": "LOCAL",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 1.8
}
]
},
"affected": [
{
"source": "secalert@redhat.com",
"affectedData": [
{
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "1.7.1",
"versionType": "semver"
}
],
"packageName": "linux-pam",
"collectionURL": "https://github.com/linux-pam/linux-pam",
"defaultStatus": "unaffected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.1"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 10",
"versions": [
{
"status": "unaffected",
"version": "0:1.6.1-8.el10",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "pam",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"versions": [
{
"status": "unaffected",
"version": "0:1.6.1-8.el10_0",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "pam",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:rhel_els:7"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
"versions": [
{
"status": "unaffected",
"version": "0:1.1.8-23.el7_9.1",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "pam",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:8::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 8",
"versions": [
{
"status": "unaffected",
"version": "0:1.3.1-37.el8_10",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "pam",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:8::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 8",
"versions": [
{
"status": "unaffected",
"version": "0:1.3.1-38.el8_10",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "pam",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:rhel_aus:8.2::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 8.2 Advanced Update Support",
"versions": [
{
"status": "unaffected",
"version": "0:1.3.1-8.el8_2.1",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "pam",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:rhel_aus:8.4::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
"versions": [
{
"status": "unaffected",
"version": "0:1.3.1-14.el8_4.1",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "pam",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:rhel_aus:8.6::baseos",
"cpe:/o:redhat:rhel_e4s:8.6::baseos",
"cpe:/o:redhat:rhel_tus:8.6::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
"versions": [
{
"status": "unaffected",
"version": "0:1.3.1-16.el8_6.2",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "pam",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:rhel_aus:8.6::baseos",
"cpe:/o:redhat:rhel_e4s:8.6::baseos",
"cpe:/o:redhat:rhel_tus:8.6::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
"versions": [
{
"status": "unaffected",
"version": "0:1.3.1-16.el8_6.2",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "pam",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:rhel_aus:8.6::baseos",
"cpe:/o:redhat:rhel_e4s:8.6::baseos",
"cpe:/o:redhat:rhel_tus:8.6::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
"versions": [
{
"status": "unaffected",
"version": "0:1.3.1-16.el8_6.2",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "pam",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:rhel_e4s:8.8::baseos",
"cpe:/o:redhat:rhel_tus:8.8::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
"versions": [
{
"status": "unaffected",
"version": "0:1.3.1-26.el8_8.1",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "pam",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/o:redhat:rhel_e4s:8.8::baseos",
"cpe:/o:redhat:rhel_tus:8.8::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
"versions": [
{
"status": "unaffected",
"version": "0:1.3.1-26.el8_8.1",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "pam",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:enterprise_linux:9::appstream",
"cpe:/o:redhat:enterprise_linux:9::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 9",
"versions": [
{
"status": "unaffected",
"version": "0:1.5.1-26.el9_6",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "pam",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:enterprise_linux:9::appstream",
"cpe:/o:redhat:enterprise_linux:9::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 9",
"versions": [
{
"status": "unaffected",
"version": "0:1.5.1-25.el9_6",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "pam",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:enterprise_linux:9::appstream",
"cpe:/o:redhat:enterprise_linux:9::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 9",
"versions": [
{
"status": "unaffected",
"version": "0:1.5.1-26.el9_6",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "pam",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:enterprise_linux:9::appstream",
"cpe:/o:redhat:enterprise_linux:9::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 9",
"versions": [
{
"status": "unaffected",
"version": "0:1.5.1-25.el9_6",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "pam",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.0::appstream",
"cpe:/o:redhat:rhel_e4s:9.0::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
"versions": [
{
"status": "unaffected",
"version": "0:1.5.1-9.el9_0.2",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "pam",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2::appstream",
"cpe:/o:redhat:rhel_e4s:9.2::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
"versions": [
{
"status": "unaffected",
"version": "0:1.5.1-15.el9_2.1",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "pam",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhel_eus:9.4::appstream",
"cpe:/o:redhat:rhel_eus:9.4::baseos"
],
"vendor": "Red Hat",
"product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
"versions": [
{
"status": "unaffected",
"version": "0:1.5.1-24.el9_4",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "pam",
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:webterminal:1.11::el9"
],
"vendor": "Red Hat",
"product": "Red Hat Web Terminal 1.11 on RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "1.11-19",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "web-terminal/web-terminal-rhel9-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:webterminal:1.11::el9"
],
"vendor": "Red Hat",
"product": "Red Hat Web Terminal 1.11 on RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "1.11-8",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "web-terminal/web-terminal-tooling-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:webterminal:1.12::el9"
],
"vendor": "Red Hat",
"product": "Red Hat Web Terminal 1.12 on RHEL 9",
"versions": [
{
"status": "unaffected",
"version": "1.12-4",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "web-terminal/web-terminal-tooling-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhosemc:1.0::el8"
],
"vendor": "Red Hat",
"product": "RHEL-8 based Middleware Containers",
"versions": [
{
"status": "unaffected",
"version": "7.13.5-4.1752066672",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhpam-7/rhpam-businesscentral-monitoring-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhosemc:1.0::el8"
],
"vendor": "Red Hat",
"product": "RHEL-8 based Middleware Containers",
"versions": [
{
"status": "unaffected",
"version": "7.13.5-4.1752065732",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhpam-7/rhpam-businesscentral-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhosemc:1.0::el8"
],
"vendor": "Red Hat",
"product": "RHEL-8 based Middleware Containers",
"versions": [
{
"status": "unaffected",
"version": "7.13.5-4.1752065732",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhpam-7/rhpam-controller-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhosemc:1.0::el8"
],
"vendor": "Red Hat",
"product": "RHEL-8 based Middleware Containers",
"versions": [
{
"status": "unaffected",
"version": "7.13.5-3.1752065737",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhpam-7/rhpam-dashbuilder-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhosemc:1.0::el8"
],
"vendor": "Red Hat",
"product": "RHEL-8 based Middleware Containers",
"versions": [
{
"status": "unaffected",
"version": "7.13.5-4.1752065731",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhpam-7/rhpam-kieserver-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhosemc:1.0::el8"
],
"vendor": "Red Hat",
"product": "RHEL-8 based Middleware Containers",
"versions": [
{
"status": "unaffected",
"version": "7.13.5-25",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhpam-7/rhpam-operator-bundle",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhosemc:1.0::el8"
],
"vendor": "Red Hat",
"product": "RHEL-8 based Middleware Containers",
"versions": [
{
"status": "unaffected",
"version": "7.13.5-4.1752065736",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhpam-7/rhpam-process-migration-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhosemc:1.0::el8"
],
"vendor": "Red Hat",
"product": "RHEL-8 based Middleware Containers",
"versions": [
{
"status": "unaffected",
"version": "7.13.5-2.1752065733",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhpam-7/rhpam-rhel8-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:rhosemc:1.0::el8"
],
"vendor": "Red Hat",
"product": "RHEL-8 based Middleware Containers",
"versions": [
{
"status": "unaffected",
"version": "7.13.5-4.1752065755",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhpam-7/rhpam-smartrouter-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_serverless:1.36::el8"
],
"vendor": "Red Hat",
"product": "RHOSS-1.36-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "1.36.0-11",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-serverless-1/logic-data-index-ephemeral-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_serverless:1.36::el8"
],
"vendor": "Red Hat",
"product": "RHOSS-1.36-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "1.36.0-11",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-serverless-1/logic-data-index-postgresql-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_serverless:1.36::el8"
],
"vendor": "Red Hat",
"product": "RHOSS-1.36-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "1.36.0-11",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-serverless-1/logic-db-migrator-tool-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_serverless:1.36::el8"
],
"vendor": "Red Hat",
"product": "RHOSS-1.36-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "1.36.0-10",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-serverless-1/logic-jobs-service-ephemeral-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_serverless:1.36::el8"
],
"vendor": "Red Hat",
"product": "RHOSS-1.36-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "1.36.0-10",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-serverless-1/logic-jobs-service-postgresql-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_serverless:1.36::el8"
],
"vendor": "Red Hat",
"product": "RHOSS-1.36-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "1.36.0-4",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-serverless-1/logic-kn-workflow-cli-artifacts-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_serverless:1.36::el8"
],
"vendor": "Red Hat",
"product": "RHOSS-1.36-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "1.36.0-9",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-serverless-1/logic-management-console-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_serverless:1.36::el8"
],
"vendor": "Red Hat",
"product": "RHOSS-1.36-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "1.36.0-12",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-serverless-1/logic-operator-bundle",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_serverless:1.36::el8"
],
"vendor": "Red Hat",
"product": "RHOSS-1.36-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "1.36.0-18",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-serverless-1/logic-rhel8-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_serverless:1.36::el8"
],
"vendor": "Red Hat",
"product": "RHOSS-1.36-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "1.36.0-11",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-serverless-1/logic-swf-builder-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_serverless:1.36::el8"
],
"vendor": "Red Hat",
"product": "RHOSS-1.36-RHEL-8",
"versions": [
{
"status": "unaffected",
"version": "1.36.0-7",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-serverless-1/logic-swf-devmode-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:cert_manager:1.16::el9"
],
"vendor": "Red Hat",
"product": "cert-manager operator for Red Hat OpenShift 1.16",
"versions": [
{
"status": "unaffected",
"version": "v1.16.5-1760515757",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "cert-manager/jetstack-cert-manager-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_compliance_operator:1::el9"
],
"vendor": "Red Hat",
"product": "OpenShift Compliance Operator 1",
"versions": [
{
"status": "unaffected",
"version": "1.8.0",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "compliance/openshift-compliance-openscap-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:discovery:2::el9"
],
"vendor": "Red Hat",
"product": "Red Hat Discovery 2",
"versions": [
{
"status": "unaffected",
"version": "2.0.0-1752592913",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "discovery/discovery-server-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:discovery:2::el9"
],
"vendor": "Red Hat",
"product": "Red Hat Discovery 2",
"versions": [
{
"status": "unaffected",
"version": "2.2.1-1758555934",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "discovery/discovery-server-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:insights_proxy:1.5::el9"
],
"vendor": "Red Hat",
"product": "Red Hat Insights proxy 1.5",
"versions": [
{
"status": "unaffected",
"version": "1.5.7-1759331989",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "insights-proxy/insights-proxy-container-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift distributed tracing 3.6.0",
"versions": [
{
"status": "unaffected",
"version": "rhosdt-3.6-1752046452",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhosdt/opentelemetry-collector-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift distributed tracing 3.6.0",
"versions": [
{
"status": "unaffected",
"version": "rhosdt-3.6-1752046437",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhosdt/opentelemetry-rhel8-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift distributed tracing 3.6.0",
"versions": [
{
"status": "unaffected",
"version": "rhosdt-3.6-1752046439",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhosdt/opentelemetry-target-allocator-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift distributed tracing 3.6.0",
"versions": [
{
"status": "unaffected",
"version": "rhosdt-3.6-1752070865",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhosdt/tempo-gateway-opa-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift distributed tracing 3.6.0",
"versions": [
{
"status": "unaffected",
"version": "rhosdt-3.6-1752070873",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhosdt/tempo-gateway-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift distributed tracing 3.6.0",
"versions": [
{
"status": "unaffected",
"version": "rhosdt-3.6-1751993590",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhosdt/tempo-jaeger-query-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift distributed tracing 3.6.0",
"versions": [
{
"status": "unaffected",
"version": "rhosdt-3.6-1752070827",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhosdt/tempo-query-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift distributed tracing 3.6.0",
"versions": [
{
"status": "unaffected",
"version": "rhosdt-3.6-1752070833",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhosdt/tempo-rhel8",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.6::el8"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift distributed tracing 3.6.0",
"versions": [
{
"status": "unaffected",
"version": "rhosdt-3.6-1752070866",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "rhosdt/tempo-rhel8-operator",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1.10::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift sandboxed containers 1.1",
"versions": [
{
"status": "unaffected",
"version": "1.10.2-1757422110",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-sandboxed-containers/osc-cloud-api-adaptor-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1.10::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift sandboxed containers 1.1",
"versions": [
{
"status": "unaffected",
"version": "1.10.2-1757421804",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-sandboxed-containers/osc-monitor-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1.10::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift sandboxed containers 1.1",
"versions": [
{
"status": "unaffected",
"version": "1.10.2-1757421879",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-sandboxed-containers/osc-podvm-builder-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
},
{
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1.10::el9"
],
"vendor": "Red Hat",
"product": "Red Hat OpenShift sandboxed containers 1.1",
"versions": [
{
"status": "unaffected",
"version": "1.10.2-1757422401",
"lessThan": "*",
"versionType": "rpm"
}
],
"packageName": "openshift-sandboxed-containers/osc-podvm-payload-rhel9",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"defaultStatus": "affected"
}
]
},
{
"source": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
"affectedData": [
{
"vendor": "Siemens",
"product": "RUGGEDCOM ROX MX5000",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V2.17.1",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM ROX MX5000RE",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V2.17.1",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM ROX RX1400",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V2.17.1",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM ROX RX1500",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V2.17.1",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM ROX RX1501",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V2.17.1",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM ROX RX1510",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V2.17.1",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM ROX RX1511",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V2.17.1",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM ROX RX1512",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V2.17.1",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM ROX RX1524",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V2.17.1",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM ROX RX1536",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V2.17.1",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
},
{
"vendor": "Siemens",
"product": "RUGGEDCOM ROX RX5000",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "V2.17.1",
"versionType": "custom"
}
],
"defaultStatus": "unknown"
}
]
}
],
"published": "2025-06-17T13:15:21.660",
"references": [
{
"url": "https://access.redhat.com/errata/RHSA-2025:10024",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2025:10027",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2025:10180",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2025:10354",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2025:10357",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2025:10358",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2025:10359",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2025:10361",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2025:10362",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2025:10735",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2025:10823",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2025:11386",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2025:11487",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2025:14557",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2025:15099",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2025:15709",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2025:15827",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2025:15828",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2025:16524",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2025:17181",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2025:18219",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2025:20181",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2025:21885",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2025:22019",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2025:9526",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/errata/RHSA-2026:0934",
"source": "secalert@redhat.com"
},
{
"url": "https://access.redhat.com/security/cve/CVE-2025-6020",
"source": "secalert@redhat.com"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2372512",
"source": "secalert@redhat.com"
},
{
"url": "https://github.com/linux-pam/linux-pam/security/advisories/GHSA-f9p8-gjr4-j9gx",
"source": "secalert@redhat.com"
},
{
"url": "http://www.openwall.com/lists/oss-security/2025/06/17/1",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://lists.debian.org/debian-lts-announce/2025/09/msg00021.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://cert-portal.siemens.com/productcert/html/ssa-577017.html",
"source": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"
}
],
"vulnStatus": "Deferred",
"weaknesses": [
{
"type": "Secondary",
"source": "secalert@redhat.com",
"description": [
{
"lang": "en",
"value": "CWE-22"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions."
},
{
"lang": "es",
"value": "Se encontró una falla en linux-pam. El módulo pam_namespace puede acceder a rutas controladas por el usuario sin la protección adecuada, lo que permite a los usuarios locales elevar sus privilegios a root mediante múltiples ataques de enlace simbólico y condiciones de ejecución."
}
],
"lastModified": "2026-09-21T17:17:29.470",
"sourceIdentifier": "secalert@redhat.com"
}