Path Traversal in IBM Proventia Network Mail Security System Virtual Appliance
CVE-2010-0154
Directory traversal vulnerability in sla/index.php in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System (PNMSS) appliance with firmware before 2.5 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the l parameter, related to an "Insecure Direct Object Reference vulnerability."
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.013 (67.3th percentile) — read the EPSS interpretation.
Affected products
- Ibm Proventia_network_mail_security_system_virtual_appliance
- Ibm Proventia_network_mail_security_system_virtual_appliance_firmware — versions 1.6
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)