FreeBSD : otrs -- information disclosure (8b97d289-d8cf-11e2-a1f5-60a44c524f57)
High Nessus Plugin ID 66938
SynopsisThe remote FreeBSD host is missing a security-related update.
DescriptionThe OTRS Project reports :
An attacker with a valid agent login could manipulate URLs in the ticket watch mechanism to see contents of tickets they are not permitted to see.
SolutionUpdate the affected package.