CVE-2021-36096

Summary

Generated Support Bundles contains private S/MIME and PGP keys if containing folder is not hidden. This issue affects: OTRS AG ((OTRS)) Community Edition 6.0.x version 6.0.1 and later versions. OTRS AG OTRS 7.0.x version 7.0.28 and prior versions; 8.0.x version 8.0.15 and prior versions.

Affected Software

VendorProductVersion RangeStatus
OTRS AG((OTRS)) Community Edition6.0.1 < 6.0.x*affected
OTRS AGOTRS7.0.x <= 7.0.28affected
OTRS AGOTRS8.0.x <= 8.0.15affected

Weaknesses

  • CWE-200: CWE-200 Information Exposure

ADP Enrichment

CVE Program Container

Additional References

References