Unrated severityNVD Advisory· Published Feb 8, 2021· Updated Sep 17, 2024
Agent is able to link customer's Config Items without permission
CVE-2021-21436
Description
Agents are able to see and link Config Items without permissions, which are defined in General Catalog. This issue affects: OTRS AG OTRSCIsInCustomerFrontend 7.0.x version 7.0.14 and prior versions.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<=7.0.14+ 1 more
- (no CPE)range: <=7.0.14
- (no CPE)range: 7.0.x
Patches
Vulnerability mechanics
References
1- otrs.com/release-notes/otrs-security-advisory-2021-04/mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.