low3.5
CVE-2021-21436
Agents are able to see and link Config Items without permissions, which are defined in General Catalog.
Impact
Agents are able to see and link Config Items without permissions, which are defined in General Catalog. This issue affects: OTRS AG OTRSCIsInCustomerFrontend 7.0.x version 7.0.14 and prior versions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Otrs | Cis In Customer Frontend | from 7.0.0 through 7.0.14 |