Directory Traversal Vulnerability in IBM Proventia Mail Security System

CVE-2010-0154

Summary

A directory traversal vulnerability exists in the Local Management Interface (LMI) of the IBM Proventia Network Mail Security System. This issue allows remote authenticated users to manipulate file paths and access sensitive files on the server by including directory traversal sequences in the request parameters. The vulnerability primarily stems from improper validation of user inputs in the sla/index.php file, which makes it possible to exploit the system and gain unauthorized access to data.

References