Froxlor up to and including 0.9.39.5 has Incorrect Access Control for tickets not owned by the current user.
froxlor froxlor