← CVE Intelligence

CVE-2021-21438

FAQ articles are shown to users without permission PUBLISHED

Description (CNA)

Agents are able to see linked FAQ articles without permissions (defined in FAQ Category). This issue affects: FAQ version 6.0.29 and prior versions, OTRS version 7.0.24 and prior versions.

Affected (CNA)

Vendor / productVersions
OTRS AG / FAQaffected 6.0.x through 6.0.29
OTRS AG / OTRSaffected unspecified through 7.0.24

CWE

CWE-264

References

ADP enrichment

CVE

No English description supplied.