Test ID:	1.3.6.1.4.1.25623.1.0.803942
Category:	Web application abuses
Title:	OTRS ITSM Ticket Split Information Disclosure Vulnerability
Summary:	OTRS (Open Ticket Request System) or OTRS:ITSM is prone to an information disclosure vulnerability.
Description:	Summary: OTRS (Open Ticket Request System) or OTRS:ITSM is prone to an information disclosure vulnerability. Vulnerability Insight: An error exists in application when handling URLs related to the ticket split mechanism. Vulnerability Impact: Successful exploitation will allow remote attackers to gain access to sensitive information. Affected Software/OS: OTRS (Open Ticket Request System) version 3.0.x up to and including 3.0.19, 3.1.x up to and including 3.1.15 and 3.2.x up to and including 3.2.6 OTRS::ITSM 3.1.0 up to and including 3.1.8, 3.0.0 up to and including 3.0.7 and 3.2.0 up to and including 3.2.4 Solution: Upgrade to OTRS (Open Ticket Request System) version 3.0.20, 3.1.16 and 3.2.7 or later, and OTRS::ITSM version 3.2.5, 3.1.9 and 3.0.8 or apply the patch from the referenced vendor advisory link. CVSS Score: 4.0 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-3551 http://advisories.mageia.org/MGASA-2013-0196.html https://bugs.gentoo.org/show_bug.cgi?id=CVE-2013-3551
Copyright	Copyright (C) 2013 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.