Low severity3.5NVD Advisory· Published Feb 8, 2021· Updated Jun 17, 2026
CVE-2021-21436
CVE-2021-21436
Description
Agents are able to see and link Config Items without permissions, which are defined in General Catalog. This issue affects: OTRS AG OTRSCIsInCustomerFrontend 7.0.x version 7.0.14 and prior versions.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:otrs:cis_in_customer_frontend:*:*:*:*:*:*:*:*Range: >=7.0.0,<=7.0.14
<=7.0.14+ 1 more
- (no CPE)range: <=7.0.14
- (no CPE)range: 7.0.x
Patches
Vulnerability mechanics
References
1- otrs.com/release-notes/otrs-security-advisory-2021-04/nvdVendor Advisory
News mentions
0No linked articles in our index yet.