CVE-2010-4761

Name of the Vulnerable Software and Affected Versions Open Ticket Request System (OTRS) versions prior to 3.0.0-beta3

Description The issue concerns the customer-interface ticket-print dialog, which fails to properly restrict customer-visible data. This allows remote authenticated users to obtain potentially sensitive information from various fields, including the responsible, owner, accounted time, pending until, and lock fields, by reading the dialog.

Recommendations For versions prior to 3.0.0-beta3, update to version 3.0.0-beta3 or later to resolve the issue.