CVE-2014-9768

8.8HIGH

Key Information:

Vendor
IBM
Status
Tivoli Netview Access Services
Vendor
CVE Published:
18 March 2016

Summary

IBM Tivoli NetView Access Services (NVAS) allows remote authenticated users to gain privileges by entering the ADM command and modifying a "page ID" field to the EMSPG2 transaction code. NOTE: the vendor's perspective is that configuration and use of available security controls in the NVAS product mitigates the reported vulnerability

References

http://www.irongeek.com/i.php?page=videos/derbycon4/t217-...
x_refsource_MISC
https://vimeo.com/96718889
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.