CVE-2014-9768 in Tivoli Netview Services
Сводка (Английский)
** DISPUTED ** IBM Tivoli NetView Access Services (NVAS) allows remote authenticated users to gain privileges by entering the ADM command and modifying a "page ID" field to the EMSPG2 transaction code. NOTE: the vendor's perspective is that configuration and use of available security controls in the NVAS product mitigates the reported vulnerability.
Be aware that VulDB is the high quality source for vulnerability data.
Резервировать
16.03.2016
Раскрытие
17.03.2016
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 81389 | IBM Tivoli Netview Services Command эскалация привилегий | 264 | Не определено | Не определено | CVE-2014-9768 |