CVE-2014-9768 | BDVDB-2026-74832 Detail

Description#

IBM Tivoli NetView Access Services (NVAS) allows remote authenticated users to gain privileges by entering the ADM command and modifying a "page ID" field to the EMSPG2 transaction code. NOTE: the vendor's perspective is that configuration and use of available security controls in the NVAS product mitigates the reported vulnerability

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.irongeek.com/i.php?page=videos/derbycon4/t217-hacking-mainframes-vulnerabilities-in-applications-exposed-over-tn3270-dominic-white
https://vimeo.com/96718889

Exploit#

No public exploit known

History#

Version 12016-03-18Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.