Cross-Site Request Forgery Vulnerabilities in IBM Proventia Network Mail Security System
CVE-2010-0153

Currently unrated

Key Information:

Vendor
IBM
Status
Proventia Network Mail Security System Virtual Appliance
Proventia Network Mail Security System Virtual Appliance Firmware
Vendor
CVE Published:
14 September 2010

Summary

The Local Management Interface (LMI) on the IBM Proventia Network Mail Security System is affected by multiple cross-site request forgery (CSRF) vulnerabilities. These flaws enable remote attackers to hijack the authentication of administrators, allowing them to execute unauthorized actions such as altering settings or performing denial of service attacks. It is crucial for administrators to upgrade to firmware version 2.5.0.2 or later to mitigate these risks.

References

http://www.ventuneac.net/security-advisories/MVSA-10-006
x_refsource_MISC
http://www.securityfocus.com/archive/1/513627/100/0/threaded
mailing-listx_refsource_BUGTRAQ

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.