CVE-2021-36096

Name of the Vulnerable Software and Affected Versions: OTRS AG (OTRS) Community Edition versions 6.0.1 and later OTRS AG OTRS versions 7.0.28 and prior OTRS AG OTRS versions 8.0.15 and prior

Description: The issue is related to Generated Support Bundles containing private S/MIME and PGP keys if the containing folder is not hidden.

Recommendations: For OTRS AG (OTRS) Community Edition versions 6.0.1 and later, consider hiding the containing folder to prevent exposure of private keys. For OTRS AG OTRS versions 7.0.28 and prior, consider hiding the containing folder to prevent exposure of private keys. For OTRS AG OTRS versions 8.0.15 and prior, consider hiding the containing folder to prevent exposure of private keys. At the moment, there is no information about a newer version that contains a fix for this vulnerability.