Cerberus Helpdesk 3.2.1 - 'Rpc.php' Unauthorized Access

Author: jonepet
type: webapps
platform: php
port: 
date_added: 2006-10-18 
date_updated: 2013-10-09 
verified: 1 
codes: CVE-2006-5428;OSVDB-29790 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/20598/info

Cerberus Helpdesk is prone to an unauthorized-access vulnerability because the application fails to authenticate users properly, resulting in an improper-access validation. A workaround is available.

An attacker can exploit this vulnerability to retrieve other users' arbitrary ticket data. Information obtained can lead to a compromise of other users' confidential information.

Version 3.2.1 is affected by this issue; other versions may be vulnerable as well.

http://www.example.com/rpc.php?cmd=display_get_requesters&id=[ticket#]