OTRS up to 3.0.20/3.1.16/3.2.7 URL AgentTicketWatcher.pm information disclosure

Summaryinfo

A vulnerability marked as problematic has been reported in OTRS up to 3.0.20/3.1.16/3.2.7. This issue affects some unknown processing of the file Kernel/Modules/AgentTicketWatcher.pm of the component URL Handler. This manipulation causes information disclosure. This vulnerability is tracked as CVE-2013-4088. The attack is possible to be carried out remotely. No exploit exists. It is suggested to upgrade the affected component.

Detailsinfo

A vulnerability was found in OTRS up to 3.0.20/3.1.16/3.2.7 (Service Management Software). It has been declared as problematic. Affected by this vulnerability is an unknown code of the file Kernel/Modules/AgentTicketWatcher.pm of the component URL Handler. The manipulation with an unknown input leads to a information disclosure vulnerability. The CWE definition for the vulnerability is CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. As an impact it is known to affect confidentiality. The summary by CVE is:

Kernel/Modules/AgentTicketWatcher.pm in Open Ticket Request System (OTRS) 3.0.x before 3.0.21, 3.1.x before 3.1.17, and 3.2.x before 3.2.8 does not properly restrict tickets, which allows remote attackers with a valid agent login to read restricted tickets via a crafted URL involving the ticket split mechanism.

The weakness was disclosed 04/21/2023 as MGASA-2013-0196. The advisory is shared at advisories.mageia.org. This vulnerability is known as CVE-2013-4088 since 06/10/2013. The exploitation appears to be easy. The attack can be launched remotely. A single authentication is needed for exploitation. Technical details are known, but no exploit is available. MITRE ATT&CK project uses the attack technique T1592 for this issue.

The vulnerability scanner Nessus provides a plugin with the ID 66938 (FreeBSD : otrs -- information disclosure (8b97d289-d8cf-11e2-a1f5-60a44c524f57)), which helps to determine the existence of the flaw in a target environment. It is assigned to the family FreeBSD Local Security Checks.

Upgrading to version 3.0.21, 3.1.17 or 3.2.8 eliminates this vulnerability.

The vulnerability is also documented in the databases at Tenable (66938) and SecurityFocus (BID 60688†). If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Service Management Software

Name

• OTRS

Version

• 3.0.0
• 3.0.1
• 3.0.2
• 3.0.3
• 3.0.4
• 3.0.5
• 3.0.6
• 3.0.7
• 3.0.8
• 3.0.9
• 3.0.10
• 3.0.11
• 3.0.12
• 3.0.13
• 3.0.14
• 3.0.15
• 3.0.16
• 3.0.17
• 3.0.18
• 3.0.19
• 3.0.20
• 3.1.0
• 3.1.1
• 3.1.2
• 3.1.3
• 3.1.4
• 3.1.5
• 3.1.6
• 3.1.7
• 3.1.8
• 3.1.9
• 3.1.10
• 3.1.11
• 3.1.12
• 3.1.13
• 3.1.14
• 3.1.15
• 3.1.16
• 3.2.0
• 3.2.1
• 3.2.2
• 3.2.3
• 3.2.4
• 3.2.5
• 3.2.6
• 3.2.7

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion