CVE Vulnerabilities

CVE-2014-9768

Published: Mar 18, 2016 | Modified: Mar 21, 2016
CVSS 3.x
8.8
HIGH
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
9 HIGH
AV:N/AC:L/Au:S/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

** DISPUTED ** IBM Tivoli NetView Access Services (NVAS) allows remote authenticated users to gain privileges by entering the ADM command and modifying a page ID field to the EMSPG2 transaction code. NOTE: the vendors perspective is that configuration and use of available security controls in the NVAS product mitigates the reported vulnerability.

Affected Software

Name Vendor Start Version End Version
Tivoli_netview_access_services Ibm - -

References