Multiple OTRS Products CVE-2013-3551 Information Disclosure Vulnerability

Bugtraq ID:	60117
Class:	Input Validation Error
CVE:	CVE-2013-3551
Remote:	Yes
Local:	No
Published:	May 22 2013 12:00AM
Updated:	Aug 14 2013 04:06PM
Credit:	The vendor reported this issue.
Vulnerable:	OTRS OTRS 3.0.10 OTRS OTRS 3.0.7 OTRS OTRS 3.0.6 OTRS OTRS 3.0.5 OTRS OTRS 3.0.4 OTRS OTRS 3.0.3 OTRS OTRS 3.0.2 OTRS OTRS 3.0.1 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:

Multiple OTRS Products CVE-2013-3551 Information Disclosure Vulnerability

Multiple OTRS products are prone to an information-disclosure vulnerability.

An attacker can exploit this issue to gain access to sensitive information; this may aid in further attacks.

The following OTRS products are vulnerable:

OTRS versions prior to 3.2.6, 3.1.15, and 3.0.19
OTRS ITSM versions prior to 3.2.4, 3.1.8, and 3.0.7

Multiple OTRS Products CVE-2013-3551 Information Disclosure Vulnerability

Attackers can use a browser to exploit this issue.

Multiple OTRS Products CVE-2013-3551 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple OTRS Products CVE-2013-3551 Information Disclosure Vulnerability

References:

• OTRS Homepage (OTRS )