CVE-2021-21436

Publication date

2021-02-08 10:55:20

Family

OTRS

State

PUBLISHED

Description

Agents are able to see and link Config Items without permissions, which are defined in General Catalog. This issue affects: OTRS AG OTRSCIsInCustomerFrontend 7.0.x version 7.0.14 and prior versions.