CVE-2021-31998

A Incorrect Default Permissions vulnerability in the packaging of inn of SUSE Linux Enterprise Server 11-SP3; openSUSE Backports SLE-15-SP2, openSUSE Leap 15.2 allows local attackers to escalate their privileges from the news user to root. This issue affects: SUSE Linux Enterprise Server 11-SP3 inn version inn-2.4.2-170.21.3.1 and prior versions. openSUSE Backports SLE-15-SP2 inn versions prior to 2.6.2. openSUSE Leap 15.2 inn versions prior to 2.6.2.

• CWE-276

• https://bugzilla.suse.com/show_bug.cgi?id=1182321Exploit, Issue Tracking, Vendor Advisory
• https://bugzilla.suse.com/show_bug.cgi?id=1182321Exploit, Issue Tracking, Vendor Advisory

Published

Jun 10, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-31987A user controlled parameter related to SMTP test functionali…7.5
• CVE-2021-31988A user controlled parameter related to SMTP test functionali…8.8
• CVE-2021-31989A user with permission to log on to the machine hosting the …5.3
• CVE-2021-3199Directory traversal with remote code execution can occur in …9.8
• CVE-2021-31996An issue was discovered in the algorithmica crate through 20…7.5
• CVE-2021-31997A UNIX Symbolic Link (Symlink) Following vulnerability in py…7.8
• CVE-2021-31999A Reliance on Untrusted Inputs in a Security Decision vulner…8.8
• CVE-2021-3200Buffer overflow vulnerability in libsolv 2020-12-13 via the …3.3
• CVE-2021-32000A UNIX Symbolic Link (Symlink) Following vulnerability in th…7.1
• CVE-2021-32001K3s in SUSE Rancher allows any user with direct access to th…6.5
• CVE-2021-32002Improper Access Control vulnerability in web service of Seco…3.3
• CVE-2021-32003Unprotected Transport of Credentials vulnerability in SiteMa…5.5