CVEvulnerability

CVE-2024-25039

7.5 HIGH Published 2026-07-30 Modified 2026-10-02 Official page ↗
Status
Analyzed
Published
2026-07-30
Last modified
2026-10-02
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-400

Description

IBM Engineering Requirements Management DOORS and DOORS Web Access 9.7.2.1 through 9.7.2.11, and 9.6.1.1 through 9.6.1.13 do not limit the length of a connection which could allow for a Slowloris HTTP denial of service attack to take place. This can cause the web server to become unresponsive.

Affected configurations

• ibm engineering requirements management doors web access (>= 9.6.1.1 <= 9.6.1.13) • ibm engineering requirements management doors web access (>= 9.7.2.1 <= 9.7.2.11)

Related

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References