← CVE Intelligence

CVE-2021-21436

Agent is able to link customer's Config Items without permission PUBLISHED

Description (CNA)

Agents are able to see and link Config Items without permissions, which are defined in General Catalog. This issue affects: OTRS AG OTRSCIsInCustomerFrontend 7.0.x version 7.0.14 and prior versions.

Affected (CNA)

Vendor / productVersions
OTRS AG / OTRSCIsInCustomerFrontendaffected 7.0.x through 7.0.14

CWE

CWE-264

References

ADP enrichment

CVE

No English description supplied.