CVE-2021-32000 — LOW (3.2) — White Hats Nepal

Vulnerability Description

A UNIX Symbolic Link (Symlink) Following vulnerability in the clone-master-clean-up.sh script of clone-master-clean-up in SUSE Linux Enterprise Server 12 SP3, SUSE Linux Enterprise Server 15 SP1; openSUSE Factory allows local attackers to delete arbitrary files. This issue affects: SUSE Linux Enterprise Server 12 SP3 clone-master-clean-up version 1.6-4.6.1 and prior versions. SUSE Linux Enterprise Server 15 SP1 clone-master-clean-up version 1.6-3.9.1 and prior versions. openSUSE Factory clone-master-clean-up version 1.6-1.4 and prior versions.

CVSS Score

3.2

LOW

CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

NONE

Integrity

LOW

Availability

LOW

Affected Products

Vendor	Product	Versions
Suse	Linux Enterprise Server	12
Suse	Opensuse Factory	-

Related Weaknesses (CWE)

CWE-59

References

https://bugzilla.suse.com/show_bug.cgi?id=1181050ExploitIssue TrackingPatch
https://bugzilla.suse.com/show_bug.cgi?id=1181050ExploitIssue TrackingPatch

FAQ

What is CVE-2021-32000?

CVE-2021-32000 is a vulnerability with a CVSS score of 3.2 (LOW). A UNIX Symbolic Link (Symlink) Following vulnerability in the clone-master-clean-up.sh script of clone-master-clean-up in SUSE Linux Enterprise Server 12 SP3, SUSE Linux Enterprise Server 15 SP1; open...

How severe is CVE-2021-32000?

CVE-2021-32000 has been rated LOW with a CVSS base score of 3.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-32000?

Check the references section above for vendor advisories and patch information. Affected products include: Suse Linux Enterprise Server, Suse Opensuse Factory.