PT-2021-14508
CVE-2021-21436
·
تاريخ النشر
2021-02-08
·
تاريخ التحديث
2021-02-10
الوصف من
CVSS 3.1
4.3
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
OTRS AG OTRSCIsInCustomerFrontend versions 7.0.14 and prior versions.
Description
The issue allows agents to see and link Config Items without the necessary permissions, which are defined in the General Catalog.
Recommendations
For OTRS AG OTRSCIsInCustomerFrontend versions 7.0.14 and prior versions, update to a version that includes the necessary permission checks to restrict access to Config Items.
As a temporary workaround, consider restricting access to the General Catalog to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾