CVE-2021-21436
Agent is able to link customer's Config Items without permission
Agents are able to see and link Config Items without permissions, which are defined in General Catalog. This issue affects: OTRS AG OTRSCIsInCustomerFrontend 7.0.x version 7.0.14 and prior versions.
CVSS 3.1 · 3.5 Low
EPSS < 1%
KEV · Not listed
Vendors
Products