A flaw in osTicket will allow a malicious attacker the ability to view files that are supposed to be protected.