4
CVSSv2

CVE-2021-36096

Published: 06/09/2021 Updated: 13/09/2021
CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8
CVSS v3 Base Score: 4.9 | Impact Score: 3.6 | Exploitability Score: 1.2
VMScore: 356
Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N

Vulnerability Summary

Generated Support Bundles contains private S/MIME and PGP keys if containing folder is not hidden. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.28 and prior versions; 8.0.x version 8.0.15 and prior versions.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

otrs otrs

Vendor Advisories

Debian Bug report logs - #993846 otrs2: CVE-2021-36096 CVE-2021-36095 CVE-2021-36094 CVE-2021-36093 Package: otrs2; Maintainer for otrs2 is Patrick Matthäi <pmatthaei@debianorg>; Source for otrs2 is src:otrs2 (PTS, buildd, popcon) Reported by: Neil Williams <codehelp@debianorg> Date: Tue, 7 Sep 2021 07:51:01 UTC ...