CVE-2021-21437

CVE-2021-21437 affects OTRSCIsInCustomerFrontend up to version 7.0.15 and ITSMConfigurationManagement up to 7.0.24. The issue allows agents to see linked Config Items without the required permissions, as defined in General Catalog. This is a data-access problem impacting confidentiality (partial)...