ZSA-2021-10

This issue was identified by the team at centuran.com and was reported to us.

An authenticated agent is able to list appointments for calendars which he has no access to.

The issue is fixed in the current release 6.0.36 / 6.1.1 . All download links can be found in the release notes 6.0.36 / release notes 6.1.

Please update as soon as possible.