CVE-2021-32000

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

A UNIX Symbolic Link (Symlink) Following vulnerability in the clone-master-clean-up.sh script of clone-master-clean-up in SUSE Linux Enterprise Server 12 SP3, SUSE Linux Enterprise Server 15 SP1; openSUSE Factory allows local attackers to delete arbitrary files. This issue affects: SUSE Linux Enterprise Server 12 SP3 clone-master-clean-up version 1.6-4.6.1 and prior versions. SUSE Linux Enterprise Server 15 SP1 clone-master-clean-up version 1.6-3.9.1 and prior versions. openSUSE Factory clone-master-clean-up version 1.6-1.4 and prior versions.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-59

Affected software

VendorProductVersions
SUSESUSE Linux Enterprise Server 12 SP3>= clone-master-clean-up, <= 1.6-4.6.1
SUSESUSE Linux Enterprise Server 15 SP1>= clone-master-clean-up, <= 1.6-3.9.1
openSUSEFactory>= clone-master-clean-up, <= 1.6-1.4

References

Timeline

Published
Jul 28, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-320016.5K3s in SUSE Rancher allows any user with direct access to the datastore, or a copy of a datastore backup, to extract the cluster's confidentCVE-2021-320023.3Improper Access Control vulnerability in web service of Secomea SiteManager allows local attacker without credentials to gather network infoCVE-2021-320035.5Unprotected Transport of Credentials vulnerability in SiteManager provisioning service allows local attacker to capture credentials if the sCVE-2021-320045.3This issue affects: Secomea GateManager All versions prior to 9.6. Improper Check of host header in web server of Secomea GateManager allowsCVE-2021-320055.4Cross-site Scripting (XSS) vulnerability in log view of Secomea SiteManager allows a logged in user to store javascript for later execution.CVE-2021-320064.3This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions. Permission Issues vulnerability in LinkManager web porCVE-2021-320073.5This issue affects: Secomea GateManager Version 9.5 and all prior versions. Protection Mechanism Failure vulnerability in web server of SecoCVE-2021-320088.7This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions. Improper Limitation of a Pathname to restricted directCVE-2021-320096.1Cross-site Scripting (XSS) vulnerability in firmware section of Secomea GateManager allows logged in user to inject javascript in browser seCVE-2021-320108.1Inadequate Encryption Strength vulnerability in TLS stack of Secomea SiteManager, LinkManager, GateManager may facilitate man in the middle CVE-2021-320125.5SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (memory consumption) via a crafted .xlsx document that CVE-2021-320135.5SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (memory consumption) via a crafted .xlsx document that