CVE-2021-25321

A UNIX Symbolic Link (Symlink) Following vulnerability in arpwatch of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Factory, Leap 15.2 allows local attackers with control of the runtime user to run arpwatch as to escalate to root upon the next restart of arpwatch. This issue affects: SUSE Linux Enterprise Server 11-SP4-LTSS arpwatch versions prior to 2.1a15. SUSE Manager Server 4.0 arpwatch versions prior to 2.1a15. SUSE OpenStack Cloud Crowbar 9 arpwatch versions prior to 2.1a15. openSUSE Factory arpwatch version 2.1a15-169.5 and prior versions. openSUSE Leap 15.2 arpwatch version 2.1a15-lp152.5.5 and prior versions.

• CWE-61

• https://bugzilla.suse.com/show_bug.cgi?id=1186240Exploit, Issue Tracking, Vendor Advisory
• https://bugzilla.suse.com/show_bug.cgi?id=1186240Exploit, Issue Tracking, Vendor Advisory

Published

Jun 30, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-25315CWE - CWE-287: Improper Authentication vulnerability in SUSE…7.8
• CVE-2021-25316A Insecure Temporary File vulnerability in s390-tools of SUS…3.3
• CVE-2021-25317A Incorrect Default Permissions vulnerability in the packagi…3.3
• CVE-2021-25318A Incorrect Permission Assignment for Critical Resource vuln…8.8
• CVE-2021-25319A Incorrect Default Permissions vulnerability in the packagi…7.8
• CVE-2021-25320A Improper Access Control vulnerability in Rancher, allows u…9.9
• CVE-2021-25322A UNIX Symbolic Link (Symlink) Following vulnerability in py…7.8
• CVE-2021-25323The default setting of MISP 2.4.136 did not enable the requi…9.1
• CVE-2021-25324MISP 2.4.136 has Stored XSS in the galaxy cluster view via a…6.1
• CVE-2021-25325MISP 2.4.136 has XSS via galaxy cluster element values to ap…6.1
• CVE-2021-25326Skyworth Digital Technology RN510 V.3.1.0.4 is affected by a…5.4
• CVE-2021-25327Skyworth Digital Technology RN510 V.3.1.0.4 contains a cross…6.5