3 matches found
Linux Distros Unpatched Vulnerability : CVE-2021-21443
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Agents are able to list customer user emails without required permissions in the bulk action screen. This issue affects: OTRS AG OTRS Community Edition: 6.0.x...
Privilege Escalation
otrs2 is vulnerable to privilege escalation. The vulnerability exists due to the lack of permission in the bulk action screen...
PT-2021-6460 · Otrs Ag +1 · Otrs +2
Name of the Vulnerable Software and Affected Versions: OTRS AG OTRS Community Edition versions 6.0.1 and later OTRS AG OTRS versions prior to 7.0.27 Description: The issue is related to errors in permission handling in the OTRS ticket system, allowing an attacker to remotely access confidential...