Skip to content
CVE PROGRAM SOURCE RECORD3.5 Low

CVE-2021-36091

Unautorized access to the calendar appointments

Description

Agents are able to list appointments in the calendars without required permissions. This issue affects: OTRS AG ((OTRS)) Community Edition: 6.0.x version 6.0.1 and later versions. OTRS AG OTRS: 7.0.x versions prior to 7.0.27.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OTRS AG ((OTRS)) Community Edition

  • 6.0.1 to < 6.0.x*affected

OTRS AG OTRS

  • 7.0.x to < 7.0.27affected

References