CVE-2021-21436 — Agent is able to link customer's Config Items without permission
Agents are able to see and link Config Items without permissions, which are defined in General Catalog. This issue affects: OTRS AG OTRSCIsInCustomerFrontend 7.0.x version 7.0.1…
Published: 2021-02-08 · CVSS: 3.5 · CVSS 3.1
Agents are able to see and link Config Items without permissions, which are defined in General Catalog. This issue affects: OTRS AG OTRSCIsInCustomerFrontend 7.0.x version 7.0.14 and prior versions.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7