Nessus Plugin #13648

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

osTicket Attachment Viewing Vulnerability

Family:

CGI abuses

Category:

attack

Copyright:

This script is Copyright (C) 2004 George A. Theall

Summary:

Checks for Attachment Viewing Vulnerability in osTicket

Version:

$Revision: 1.4 $

Cve_id:

CAN-2004-0613

Bugtraq_id:

-

Xrefs:

-

Description:

The target is running at least one instance of osTicket that enables a
remote user to view attachments associated with any existing ticket.
These attachments may contain sensitive information.

Solution : Upgrade to osTicket STS 1.2.7 or later.
Risk factor : Low