← CVE Intelligence

CVE-2021-21437

Config Items are shown to users without permission PUBLISHED

Description (CNA)

Agents are able to see linked Config Items without permissions, which are defined in General Catalog. This issue affects: OTRSCIsInCustomerFrontend 7.0.15 and prior versions, ITSMConfigurationManagement 7.0.24 and prior versions

Affected (CNA)

Vendor / productVersions
OTRS AG / OTRSCIsInCustomerFrontendaffected 7.0.x through 7.0.15
OTRS AG / ITSMConfigurationManagementaffected 7.0.x through 7.0.24

CWE

CWE-264

References

ADP enrichment

CVE

No English description supplied.