Beveiligingsadvies

CVE-2021-36097

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-10-18 07:00:13

Laatst bijgewerkt 2024-09-16 22:51:23

Toegewezen door OTRS

CVSS-score 3.5

Status PUBLISHED

Beschrijving

Agents are able to lock the ticket without the "Owner" permission. Once the ticket is locked, it could be moved to the queue where the agent has "rw" permissions and gain a full control. This issue affects: OTRS AG OTRS 8.0.x version: 8.0.16 and prior versions.

← Alle CVE's bekijken Bekijk op cve.org ↗