CVE-2025-3528

May 9, 2025, 12:15 p.m.

8.2
High

Description

A flaw was found in the Mirror Registry. The quay-app container shipped as part of the Mirror Registry for OpenShift has write access to the `/etc/passwd`. This flaw allows a malicious actor with access to the container to modify the passwd file and elevate their privileges to the root user within that pod.

Product(s) Impacted

Vendor Product Versions
Redhat
  • Quay-app
  • Mirror Registry
  • *
  • *

Weaknesses

Common security weaknesses mapped to this vulnerability.

CWE-276
Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.

*CPE(s)

Affected systems and software identified for this CVE.

Type Vendor Product Version Update Edition Language Software Edition Target Software Target Hardware Other Information
a redhat quay-app / / / / / openshift / /
a redhat mirror_registry / / / / / / / /

References

https://access.redhat.com/security/cve/CVE-2025-3528
https://bugzilla.redhat.com/show_bug.cgi?id=2359143

Tags

secalert@redhat.com
CWE-276
2025-05-09
CVE-2025-3528

CVSS Score

8.2 / 10

CVSS Data - 3.1

  • Attack Vector: LOCAL
  • Attack Complexity: LOW
  • Privileges Required: LOW
  • Scope: CHANGED
  • Confidentiality Impact: HIGH
  • Integrity Impact: HIGH
  • Availability Impact: HIGH

    • CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

    View Vector String

Timeline

Published: May 9, 2025, 12:15 p.m.
Last Modified: May 9, 2025, 12:15 p.m.

Status : Received

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

secalert@redhat.com

*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.