low3.5
CVE-2021-21437
Agents are able to see linked Config Items without permissions, which are defined in General Catalog.
Impact
Agents are able to see linked Config Items without permissions, which are defined in General Catalog. This issue affects: OTRSCIsInCustomerFrontend 7.0.15 and prior versions, ITSMConfigurationManagement 7.0.24 and prior versions
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Otrs | Itsmconfigurationmanagement | from 7.0.0 through 7.0.24 |
| Otrs | Otrscisincustomerfrontend | from 7.0.0 through 7.0.15 |