CVE-2013-3551

Vulnerability

A vulnerability in Kernel/Modules/AgentTicketPhone.pm allows an attacker with a valid agent login to read restricted tickets via a crafted URL involving the ticket split mechanism. Affected versions: OTRS 3.0.x before 3.0.20, 3.1.x before 3.1.16, and 3.2.x before 3.2.7; OTRS ITSM 3.0.x before 3.0.8, 3.1.x before 3.1.9, and 3.2.x before 3.2.5 [1][2].

Exploitation

An attacker must have a valid agent login to OTRS. By crafting a specific URL in the ticket split mechanism, the attacker can access tickets that they are not permitted to see. The vulnerability lies in improper restriction of tickets during the split process [2].

Impact

Successful exploitation allows the attacker to read the contents of restricted tickets, leading to unauthorized information disclosure. The attacker gains access to sensitive data that should be protected by ticket permissions.

Mitigation

Fixed in OTRS versions 3.0.20, 3.1.16, and 3.2.7, and OTRS ITSM versions 3.0.8, 3.1.9, and 3.2.5. Users should upgrade to these patched versions. No workaround is known [1][2].