Red Hat Process Automation Manager 7.0
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:process_automation_manager:7.0:*:*:*:*:*:*:*
part: a version: 7.0 update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Process Automation Manager (f94753a6-408f-50c3-8bc0-431fba7568e0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-58713 |
vulnerable | 2026-06-08 07:35:19.044292 |
Rhpam: privilege escalation via excessive /etc/passwd permissions
MEDIUM (6.4)
A container privilege escalation flaw was found in certain Red Hat Process Automation Manager images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root user, can leverage their membership in the root group to modify the /etc/passwd file. This could allow the attacker to add a new user with any arbitrary UID, including UID 0, leading to full root privileges within the container.
Published: 2026-04-08T13:55:11.428Z
Updated: 2026-04-08T14:28:41.733Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4853 |
vulnerable | 2026-06-08 06:16:14.740391 |
Quarkus: http security policy bypass
HIGH (8.1)
A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an attacker to bypass the security policy altogether, resulting in unauthorized endpoint access and possibly a denial of service.
Published: 2023-09-20T09:47:32.150Z
Updated: 2025-11-07T10:17:29.266Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.