CVE-2021-32000

LOW

SUSE Linux Enterprise Server clone-master-clean-up - Arbitrary File Deletion via Symlink Following

Title source: llm
STIX 2.1

Description

A UNIX Symbolic Link (Symlink) Following vulnerability in the clone-master-clean-up.sh script of clone-master-clean-up in SUSE Linux Enterprise Server 12 SP3, SUSE Linux Enterprise Server 15 SP1; openSUSE Factory allows local attackers to delete arbitrary files. This issue affects: SUSE Linux Enterprise Server 12 SP3 clone-master-clean-up version 1.6-4.6.1 and prior versions. SUSE Linux Enterprise Server 15 SP1 clone-master-clean-up version 1.6-3.9.1 and prior versions. openSUSE Factory clone-master-clean-up version 1.6-1.4 and prior versions.

References (1)

Core 1
Core References
Exploit, Issue Tracking, Patch, Vendor Advisory
https://bugzilla.suse.com/show_bug.cgi?id=1181050

Scores

CVSS v3 3.2
EPSS 0.0002
EPSS Percentile 4.6%
Attack Vector PHYSICAL
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

Details

CWE
CWE-59
Status published
Products (3)
suse/linux_enterprise_server 12 sp3
suse/linux_enterprise_server 15 sp1
suse/opensuse_factory
Published Jul 28, 2021
Tracked Since Feb 18, 2026