IBM Proventia Network Mail Security System Virtual Appliance Management Interface pvm_messagestore.php Stored cross site scripting

Summaryinfo

A vulnerability, which was classified as problematic, was found in IBM Proventia Network Mail Security System Virtual Appliance up to 2.4. This affects an unknown function of the file pvm_messagestore.php of the component Management Interface. Executing a manipulation can lead to cross site scripting (Stored). This vulnerability is registered as CVE-2010-0152. It is possible to launch the attack remotely. No exploit is available. You should upgrade the affected component.

Detailsinfo

A vulnerability was found in IBM Proventia Network Mail Security System Virtual Appliance up to 2.4. It has been declared as problematic. This vulnerability affects some unknown functionality of the file pvm_messagestore.php of the component Management Interface. The manipulation with an unknown input leads to a cross site scripting vulnerability (Stored). The CWE definition for the vulnerability is CWE-79. The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. As an impact it is known to affect integrity. CVE summarizes:

Multiple cross-site scripting (XSS) vulnerabilities in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System (PNMSS) appliance with firmware before 2.5.0.2 allow remote attackers to inject arbitrary web script or HTML via (1) the date1 parameter to pvm_messagestore.php, (2) the userfilter parameter to pvm_user_management.php, (3) the ping parameter to sys_tools.php in a sys_ping.php action, (4) the action parameter to pvm_cert_commaction.php, (5) the action parameter to pvm_cert_serveraction.php, (6) the action parameter to pvm_smtpstore.php, (7) the l parameter to sla/index.php, or (8) unspecified stored data; and allow remote authenticated users to inject arbitrary web script or HTML via (9) saved search filters.

The weakness was published 09/14/2010 (Website). The advisory is shared for download at ventuneac.net. This vulnerability was named CVE-2010-0152 since 01/04/2010. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. Successful exploitation requires user interaction by the victim. There are known technical details, but no exploit is available. The MITRE ATT&CK project declares the attack technique as T1059.007.

By approaching the search of inurl:pvm_messagestore.php it is possible to find vulnerable targets with Google Hacking.

Upgrading to version 2.5 eliminates this vulnerability.

Similar entries are available at VDB-54703, VDB-54702 and VDB-54701. Once again VulDB remains the best source for vulnerability data.

Productinfo

Vendor

• IBM

Name

• Proventia Network Mail Security System Virtual Appliance

Version

• 2.0
• 2.1
• 2.2
• 2.3
• 2.4

License

• commercial

Website

• Vendor: https://www.ibm.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion