Skip to content
OpenAdvisories
Low · 3.5 CVE-2021-21437 EUVD-2021-8711GHSA-275p-fw84-9hhf

Config Items are shown to users without permission

Published Mar 22, 2021 · Updated Sep 16, 2024 · Assigned by OTRS

Description

Agents are able to see linked Config Items without permissions, which are defined in General Catalog. This issue affects: OTRSCIsInCustomerFrontend 7.0.15 and prior versions, ITSMConfigurationManagement 7.0.24 and prior versions

Affected products

VendorProductAffectedFixed
OTRS OTRSCIsInCustomerFrontend 7.0.x – ≤ 7.0.15 —
OTRS ITSMConfigurationManagement 7.0.x – ≤ 7.0.24 —

References