From NVD
Directory traversal vulnerability in sla/index.php in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System (PNMSS) appliance with firmware before 2.5 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the l parameter, related to an "Insecure Direct Object Reference vulnerability."
From 神龙GPT (AIGC)
"在IBM Proventia Network Mail Security System (PNMSS) appliances with firmware before 2.5的本地管理界面(LMI)的sla/index.php文件中的目录遍历漏洞允许远程授权用户通过l参数中的..(dot dot)读取任意文件,与“不安全的直接对象引用漏洞”相关。" 到中文:
在IBM Proventia Network Mail Security System (PNMSS) appliances with firmware before 2.5的LMI中的sla/index.php文件中的目录遍历漏洞,允许远程授权用户通过l参数中的..(dot dot)读取任意文件,与“不安全的直接对象引用漏洞”相关。