CVE-2021-21435: Information exposure in PDF export
Article Bcc fields and agent personal information are shown when customer prints the ticket (PDF) via external interface. This issue affects: OTRS AG OTRS 7.0.x version 7.0.23 and prior versions; 8.0.x version 8.0.10 and prior versions.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2021-21435.
What is the severity of CVE-2021-21435?
The severity of CVE-2021-21435 is medium (severity value: 6.5).
Which software versions are affected by CVE-2021-21435?
OTRS 7.0.x version 7.0.23 and prior versions; 8.0.x version 8.0.10 and prior versions are affected by CVE-2021-21435.
How does CVE-2021-21435 affect OTRS AG OTRS?
CVE-2021-21435 allows Bcc fields and agent personal information to be shown when a customer prints the ticket (PDF) via the external interface.
Where can I find more information about CVE-2021-21435?
You can find more information about CVE-2021-21435 in the OTRS Security Advisory 2021-02: [OTRS Security Advisory 2021-02](https://otrs.com/release-notes/otrs-security-advisory-2021-02/).