CVE-2011-5075 in Support Incident Tracker
Summary
by MITRE
translate.php in Support Incident Tracker (aka SiT!) 3.45 through 3.65 allows remote attackers to obtain sensitive information via a direct request using the save action, which reveals the installation path.
Be aware that VulDB is the high quality source for vulnerability data.
Analysis
by VulDB Data Team • 01/19/2025
The vulnerability identified as CVE-2011-5075 affects Support Incident Tracker version 3.45 through 3.65, specifically targeting the translate.php component within the application. This issue represents a sensitive data exposure vulnerability that occurs when attackers can directly access the translate.php script with the save action parameter. The flaw allows unauthorized remote attackers to retrieve the absolute installation path of the SiT! application, which constitutes a significant information disclosure risk.
The technical mechanism behind this vulnerability involves the translate.php script failing to properly validate or restrict access to its save functionality. When a malicious actor sends a direct HTTP request to the translate.php endpoint with the save action parameter, the application does not adequately verify the request source or user authentication status. This lack of proper access control validation results in the application inadvertently revealing its file system path structure to external parties. The installation path disclosure represents a critical information leak that can be leveraged by attackers to understand the underlying system architecture and potentially identify additional attack vectors.
From an operational impact perspective, this vulnerability significantly weakens the security posture of affected systems by providing attackers with crucial reconnaissance information. The exposed installation path can be used to map the application's directory structure, potentially revealing sensitive file locations, configuration files, or other system components that might be vulnerable to further exploitation. This information disclosure can facilitate more sophisticated attacks such as local file inclusion vulnerabilities or directory traversal exploits. The vulnerability falls under CWE-200, which specifically addresses the disclosure of sensitive information, and aligns with ATT&CK technique T1213.002 for data from information repositories.
The security implications extend beyond simple path disclosure, as the vulnerability demonstrates poor input validation and access control mechanisms within the application's codebase. Attackers can use the disclosed path information to craft more targeted attacks against the application's file system, potentially leading to full system compromise. The vulnerability affects a range of versions, indicating a prolonged period during which the access control flaw remained unaddressed. Organizations running affected versions of SiT! should immediately implement mitigations including access restrictions, input validation improvements, and application updates to prevent exploitation of this information disclosure vulnerability.
Mitigation strategies should include implementing proper authentication checks before allowing access to the translate.php script's save functionality, restricting direct access to administrative components, and applying the latest security patches from the vendor. Network-level controls such as web application firewalls can help detect and block suspicious requests to the translate.php endpoint. Additionally, regular security audits of application components should be conducted to identify similar access control flaws that could expose sensitive system information. The vulnerability highlights the importance of proper access control implementation and input validation to prevent unauthorized information disclosure that could compromise overall system security.