CVE-2021-36096: Otrs

Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days.

Generated Support Bundles contains private S/MIME and PGP keys if containing folder is not hidden. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.28 and prior versions; 8.0.x version 8.0.15 and prior versions.

Affected products

• Otrs Otrs: from 6.0.1; from 7.0.0, before 7.0.29 (fixed in 7.0.29); from 8.0.0, before 8.0.16 (fixed in 8.0.16)

Published 2021-09-06. Last modified 2026-06-17.