Skip to content
CVE PROGRAM SOURCE RECORD3.5 Low

CVE-2021-21436

Agent is able to link customer's Config Items without permission

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
OTRS

Description

Agents are able to see and link Config Items without permissions, which are defined in General Catalog. This issue affects: OTRS AG OTRSCIsInCustomerFrontend 7.0.x version 7.0.14 and prior versions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OTRS AG OTRSCIsInCustomerFrontend

  • 7.0.x to ≤ 7.0.14affected

References