6.5
CVSSv3

CVE-2021-21440

Published: 26/07/2021 Updated: 31/08/2023
CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 356
Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N

Vulnerability Summary

Generated Support Bundles contains private S/MIME and PGP keys if containing folder is not hidden. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.27 and prior versions; 8.0.x version 8.0.14 and prior versions.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

otrs otrs

Vendor Advisories

Debian Bug report logs - #991593 otrs2: CVE-2021-36092 CVE-2021-36091 CVE-2021-21443 CVE-2021-21440 Package: src:otrs2; Maintainer for src:otrs2 is Patrick Matthäi <pmatthaei@debianorg>; Reported by: Moritz Mühlenhoff <jmm@inutilorg> Date: Wed, 28 Jul 2021 09:15:02 UTC Severity: grave Tags: security, upstream ...