CVE-2014-9768 in Tivoli Netview Services
Summary
** DISPUTED ** IBM Tivoli NetView Access Services (NVAS) allows remote authenticated users to gain privileges by entering the ADM command and modifying a "page ID" field to the EMSPG2 transaction code. NOTE: the vendor's perspective is that configuration and use of available security controls in the NVAS product mitigates the reported vulnerability.
Be aware that VulDB is the high quality source for vulnerability data.
Reservation
03/16/2016
Disclosure
03/17/2016
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 81389 | IBM Tivoli Netview Services Command access control | 264 | Not defined | Not defined | CVE-2014-9768 |