osTicket Broken Access Control Vulnerability in AJAX Functions

A broken access control vulnerability has been identified in osTicket versions prior to 1.17.6 and 1.18.2. The issue resides in the AJAX functions of the system, where normal agents may gain unauthorized access to system logs. This vulnerability allows for additional access issues through AJAX content.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive system logs via the AJAX interface, potentially allowing normal agents to view information they should not have access to.

Reproduction

To reproduce this vulnerability, log into osTicket as a normal agent. Navigate to the AJAX functions that handle syslog management. Attempt to access system logs through these functions. The absence of proper access controls will allow unauthorized log access.

Remediation

Users can upgrade to osTicket versions 1.17.6 or 1.18.2, where this vulnerability has been addressed.