CVE 3.5 LOW

IBM Engineering Requirements Management Doors Next security bypass_CVE-2025-2139

3.5 / 10
LOW
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Description

IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to delete reviews from other users due to client-side enforcement of server-side security.

Basic Information

ID CVE-2025-2139
Source ibm
Published Oct 12, 2025 at 13:35

Affected Product

Vendor IBM
Product Engineering Requirements Management Doors Next
Version 7.0.2
Affected Versions IBM Engineering Requirements Management Doors Next 7.0.2
IBM Engineering Requirements Management Doors Next 7.0.3
IBM Engineering Requirements Management Doors Next 7.1

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.