OTRS Ticket-print Information Disclosure Vulnerability

# SPDX-FileCopyrightText: 2013 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

CPE = "cpe:/a:otrs:otrs";

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.803926");
  script_version("2023-07-27T05:05:08+0000");
  script_cve_id("CVE-2010-4761");
  script_tag(name:"cvss_base", value:"4.0");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:S/C:P/I:N/A:N");
  script_tag(name:"last_modification", value:"2023-07-27 05:05:08 +0000 (Thu, 27 Jul 2023)");
  script_tag(name:"creation_date", value:"2013-09-22 09:18:31 +0530 (Sun, 22 Sep 2013)");
  script_name("OTRS Ticket-print Information Disclosure Vulnerability");

  script_tag(name:"impact", value:"Successful exploitation will allow remote authenticated users to obtain
  potentially sensitive information from the (1) responsible, (2) owner,
  (3) accounted time, (4) pending until, and (5) lock fields by reading this dialog.");

  script_tag(name:"vuldetect", value:"Checks if a vulnerable version is present on the target host.");

  script_tag(name:"insight", value:"An error exists in customer-interface ticket-print dialog which fails to
  restrict customer-visible data.");

  script_tag(name:"solution", value:"Upgrade to OTRS (Open Ticket Request System) version 3.0.0-beta3 or
  later.");

  script_tag(name:"solution_type", value:"VendorFix");

  script_tag(name:"summary", value:"OTRS (Open Ticket Request System) is prone to an information disclosure vulnerability.");

  script_tag(name:"affected", value:"OTRS (Open Ticket Request System) version before 3.0.0-beta3.");
  script_category(ACT_GATHER_INFO);
  script_tag(name:"qod_type", value:"remote_banner");
  script_family("Web application abuses");
  script_copyright("Copyright (C) 2013 Greenbone AG");
  script_dependencies("secpod_otrs_detect.nasl");
  script_mandatory_keys("OTRS/installed");

  exit(0);
}

include("version_func.inc");
include("host_details.inc");

if(!port = get_app_port(cpe:CPE))
  exit(0);

if(!vers = get_app_version(cpe:CPE, port:port))
  exit(0);

if(version_is_less(version:vers, test_version:"3.0.0.beta3")) {
  report = report_fixed_ver(installed_vers:vers, fixed_version:"3.0.0-beta3");
  security_message(port:port, data:report);
  exit(0);
}

exit(99);