CVE-2021-25317

A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Leap 15.2, Factory allows local attackers with control of the lp users to create files as root with 0644 permissions without the ability to set the content. This issue affects: SUSE Linux Enterprise Server 11-SP4-LTSS cups versions prior to 1.3.9. SUSE Manager Server 4.0 cups versions prior to 2.2.7. SUSE OpenStack Cloud Crowbar 9 cups versions prior to 1.7.5. openSUSE Leap 15.2 cups versions prior to 2.2.7. openSUSE Factory cups version 2.3.3op2-2.1 and prior versions.

• CWE-276

• https://bugzilla.suse.com/show_bug.cgi?id=1184161Issue Tracking, Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GWPGZLT3U776Q5YPPSA6LGFWWBDWBVH3/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H74BP746O5NNVCBUTLLZYAFBPESFVECV/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S37IDQGHTORQ3Z6VRDQIGBYVOI27YG47/
• https://bugzilla.suse.com/show_bug.cgi?id=1184161Issue Tracking, Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GWPGZLT3U776Q5YPPSA6LGFWWBDWBVH3/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H74BP746O5NNVCBUTLLZYAFBPESFVECV/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S37IDQGHTORQ3Z6VRDQIGBYVOI27YG47/

Published

May 5, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-25311condor_credd in HTCondor before 8.9.11 allows Directory Trav…9.9
• CVE-2021-25312HTCondor before 8.9.11 allows a user to submit a job as anot…8.8
• CVE-2021-25313A Improper Neutralization of Input During Web Page Generatio…6.1
• CVE-2021-25314A Creation of Temporary File With Insecure Permissions vulne…7.8
• CVE-2021-25315CWE - CWE-287: Improper Authentication vulnerability in SUSE…7.8
• CVE-2021-25316A Insecure Temporary File vulnerability in s390-tools of SUS…3.3
• CVE-2021-25318A Incorrect Permission Assignment for Critical Resource vuln…8.8
• CVE-2021-25319A Incorrect Default Permissions vulnerability in the packagi…7.8
• CVE-2021-25320A Improper Access Control vulnerability in Rancher, allows u…9.9
• CVE-2021-25321A UNIX Symbolic Link (Symlink) Following vulnerability in ar…7.8
• CVE-2021-25322A UNIX Symbolic Link (Symlink) Following vulnerability in py…7.8
• CVE-2021-25323The default setting of MISP 2.4.136 did not enable the requi…9.1