Skip to content
CVE PROGRAM SOURCE RECORD3.5 Low

CVE-2021-21437

Config Items are shown to users without permission

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
OTRS

Description

Agents are able to see linked Config Items without permissions, which are defined in General Catalog. This issue affects: OTRSCIsInCustomerFrontend 7.0.15 and prior versions, ITSMConfigurationManagement 7.0.24 and prior versions

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OTRS AG OTRSCIsInCustomerFrontend

  • 7.0.x to ≤ 7.0.15affected

OTRS AG ITSMConfigurationManagement

  • 7.0.x to ≤ 7.0.24affected

References