OTRS is prone to a local file-disclosure vulnerability

Exploiting this vulnerability would allow an attacker to obtain potentially sensitive information from local files on computers running the vulnerable application. This may aid in further attacks. Impact Level: Application

Updates are available. Please see the references for more information.

An error exists in application which fails to adequately validate user-supplied input.

Open Ticket Request System (OTRS) version 2.4.x before 2.4.11 and 3.x before 3.0.8

Get the installed version of OTRS with the help of detect NVT and check the version is vulnerable or not.

• http://otrs.org/
• http://otrs.org/advisory/OSA-2011-03-en/
• http://www.securityfocus.com/bid/49251

---

Updated on 2015-03-25