CVE-2021-21435
CVE-2021-21435 · Information exposure in PDF export
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Article Bcc fields and agent personal information are shown when customer prints the ticket (PDF) via external interface. This issue affects: OTRS AG OTRS 7.0.x version 7.0.23 and prior versions; 8.0.x version 8.0.10 and prior versions.
CVSS 5.7 · Medium · EPSS 1.3%
- Published
- Updated
Stack: system
Affected products and versions
otrs
- Versions
- ≥ 7.0.x, ≤ 7.0.23: Affected (custom)
- ≥ 8.0.x, ≤ 8.0.10: Affected (custom)
No fix published
otrs2 Ubuntu:16.04:LTS
- Versions
- 4.0.10-1
- 5.0.1-1
- 5.0.1-2
- 5.0.2-1
- 5.0.3-1
- 5.0.5-1
- 5.0.6-1
- 5.0.7-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
otrs2 Ubuntu:18.04:LTS
- Versions
- 5.0.23-1
- 5.0.24-1
- 6.0.1-1
- 6.0.2-1
- 6.0.3-1
- 6.0.4-1
- 6.0.5-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
otrs2 Ubuntu:20.04:LTS
- Versions
- 6.0.20-1
- 6.0.23-2
- 6.0.24-1
- 6.0.25-1
- 6.0.25-2
- 6.0.25-3
- 6.0.26-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
otrs2 Ubuntu:22.04:LTS
- Versions
- 6.0.32-6
- 6.1.2-1
- 6.2.1-1
- 6.2.2-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published