Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-41787 EUVD-2024-38907GHSA-c5jf-c5pw-3xhj

IBM Engineering Requirements Management DOORS Next code execution

Published Jan 10, 2025 · Updated Jan 10, 2025 · Assigned by ibm

Description

IBM Engineering Requirements Management DOORS Next 7.0.2 and 7.0.3 could allow a remote attacker to bypass security restrictions, caused by a race condition. By sending a specially crafted request, an attacker could exploit this vulnerability to remotely execute code.

Affected products

VendorProductAffectedFixed
IBM Engineering Requirements Management DOORS Next 7.0.2, 7.0.3 —

References