CVE-2014-9768

https://notcve.org/view.php?id=CVE-2014-9768

IBM Tivoli NetView Access Services (NVAS) allows remote authenticated users to gain privileges by entering the ADM command and modifying a "page ID" field to the EMSPG2 transaction code. NOTE: the vendor's perspective is that configuration and use of available security controls in the NVAS product mitigates the reported vulnerability ** DISPUTADA ** IBM Tivoli NetView Access Services (NVAS) permite a usuarios remotos autenticados obtener privilegios introduciendo un comando ADM y modificando un campo "page ID" en el código de transacción EMSPG2. NOTA: la perspectiva del fabricante es que la configuración y uso de los controles de seguridad disponibles en el producto NVAS mitiga la vulnerabilidad reportada. • http://www.irongeek.com/i.php?page=videos/derbycon4/t217-hacking-mainframes-vulnerabilities-in-applications-exposed-over-tn3270-dominic-white https://vimeo.com/96718889 • CWE-264: Permissions, Privileges, and Access Controls •