[bug #5707] (freegis) RT worldwide open

[Request Tracker]

this bug's URL: http://intevation.de/rt/webrt?serial_num=5707
-------------------------------------------------------------------------

Subject: RT worldwide open

Dear,

Is your rt-ticketting system supposed to be world-readable?

Googling for some information about RT, I stumbled against your
web-helpdesksystem. Without any login or password I was able to read all
tickets. Comments included.
If I wanted, it would have been possible for me to read some private info like
all the e-mailaddresses involved. (That's why I'm using my hotmail-adres,BTW)
I'm sorry, but to me this doesn't seemed to be very smart for "an intelligent
consulting company".

Please note that I do not wish you or your firm any harm. I just noticed it,
was flabbergasted and wanted to get your attention on it.

Yours sincerely,
Lieven Bridts
Puuter AT hotmail.com  

-------------------------------------------- Managed by Request Tracker