CVE-2010-0154
IBM Proventia Network Mail Security System Path Traversal via LMI sla/index.php
Title source: llmDescription
Directory traversal vulnerability in sla/index.php in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System (PNMSS) appliance with firmware before 2.5 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the l parameter, related to an "Insecure Direct Object Reference vulnerability."
References (2)
Core 2
Core References
Exploit x_refsource_misc
http://www.ventuneac.net/security-advisories/MVSA-10-008
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/513637/100/0/threaded
Scores
EPSS
0.0129
EPSS Percentile
66.8%
Details
CWE
CWE-22
Status
published
Products (2)
ibm/proventia_network_mail_security_system_virtual_appliance
ibm/proventia_network_mail_security_system_virtual_appliance_firmware
1.6
Published
Sep 14, 2010
Tracked Since
Feb 18, 2026