Skip to content
CVE PROGRAM SOURCE RECORD3.5 Low

CVE-2021-21443

Unautorized listing of the customer user emails

Description

Agents are able to list customer user emails without required permissions in the bulk action screen. This issue affects: OTRS AG ((OTRS)) Community Edition: 6.0.x version 6.0.1 and later versions. OTRS AG OTRS: 7.0.x versions prior to 7.0.27.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OTRS AG ((OTRS)) Community Edition

  • 6.0.1 to < 6.0.x*affected

OTRS AG OTRS

  • 7.0.x to < 7.0.27affected

References