Directory traversal vulnerability in sla/index.php in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System (PNMSS) appliance with firmware before 2.5 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the l parameter, related to an "Insecure Direct Object Reference vulnerability."
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2010-09-14T16:39:00
Updated: 2024-08-07T00:37:54.126Z
Reserved: 2010-01-04T00:00:00
Link: CVE-2010-0154
Vulnrichment
No data.
NVD
Status : Modified
Published: 2010-09-14T17:00:01.433
Modified: 2018-10-10T19:51:12.743
Link: CVE-2010-0154
Redhat
No data.