CyberRota Analysis
AI-GeneratedThe Perfect Support Ticketing & Document Management System version 1.7 is vulnerable to a broken access control issue that enables authenticated users with Agent-level privileges to alter the Support Agent assignment for tickets. This flaw allows attackers to add or remove any user, including Superadmin accounts, from ticket assignments, effectively bypassing role-based access controls. Organizations using this system, particularly those with sensitive ticketing processes, should prioritize remediation to prevent unauthorized access and potential escalation of privileges.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Perfect Support Ticketing & Document Management System through 1.7 contains a broken access control vulnerability that allows authenticated attackers with Agent-level privileges to manipulate the Support Agent assignment field of tickets by bypassing intended authorization checks. Attackers can add or remove any user, including Superadmin accounts, from the Support Agent field of any ticket to which they are assigned, circumventing role-based access controls.