CVE-2021-21436: Otrs Cis In Customer Frontend

Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days.

Agents are able to see and link Config Items without permissions, which are defined in General Catalog. This issue affects: OTRS AG OTRSCIsInCustomerFrontend 7.0.x version 7.0.14 and prior versions.

Affected products

• Otrs Cis In Customer Frontend: from 7.0.0, up to and including 7.0.14

Published 2021-02-08. Last modified 2026-06-17.