CVE-2010-0154

2010-09-14T13:00:01
ID CVE-2010-0154
Type cve
Reporter NVD
Modified 2018-10-10T15:51:12

Description

Directory traversal vulnerability in sla/index.php in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System (PNMSS) appliance with firmware before 2.5 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the l parameter, related to an "Insecure Direct Object Reference vulnerability."