← All advisories

Unrated severityNVD Advisory· Published Mar 21, 2022· Updated Sep 17, 2024

Authenticated remote code execution

CVE-2021-36100

Description

Specially crafted string in OTRS system configuration can allow the execution of any system command.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5

OTRS/Otrsllm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 8.0.x
OTRS AG/((OTRS)) Community Editionv5
Range: 6.0.1
OTRS AG/OTRSSTORMv5
Range: 7.0.x
OTRS AG/SystemMonitoringv5
Range: 7.0.x

Patches

Vulnerability mechanics

References

2

lists.debian.org/debian-lts-announce/2023/08/msg00040.htmlmitremailing-list
otrs.com/release-notes/otrs-security-advisory-2022-03/mitre

News mentions

0

No linked articles in our index yet.