Skip to content
CVE PROGRAM SOURCE RECORD3.5 Low

CVE-2021-21438

FAQ articles are shown to users without permission

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
OTRS

Description

Agents are able to see linked FAQ articles without permissions (defined in FAQ Category). This issue affects: FAQ version 6.0.29 and prior versions, OTRS version 7.0.24 and prior versions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OTRS AG FAQ

  • 6.0.x to ≤ 6.0.29affected

OTRS AG OTRS

  • unspecified to ≤ 7.0.24affected

References