Unauthenticated disclosure via unprotected frontend configuration endpoint

Information disclosure in the OTRS Agent Frontend allows remote attackers to read internal configuration via an unauthenticated endpoint. The configuration endpoint returns data intended for authenticated agents without requiring authentication, exposing installation details such as routes, authorization groups, and enabled features. Exploitation requires network access to the endpoint; the disclosure supports fingerprinting but does not directly expose user credentials or permit configuration changes.