CVE-2021-21438

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2021
Source publication: Mar 22, 2021
Source updated: Sep 17, 2024
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

FAQ articles are shown to users without permission

Agents are able to see linked FAQ articles without permissions (defined in FAQ Category). This issue affects: FAQ version 6.0.29 and prior versions, OTRS version 7.0.24 and prior versions.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

FAQ

Vendor: OTRS AG
Product: FAQ
Platforms: Unknown
Default status: Unknown

FAQ · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
6.0.x	`affected`	custom	Unavailable	6.0.29	None listed

OTRS

Vendor: OTRS AG
Product: OTRS
Platforms: Unknown
Default status: Unknown

OTRS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
unspecified	`affected`	custom	Unavailable	7.0.24	None listed