CVEvulnerability

CVE-2025-2139

3.5 LOW Published 2025-10-12 Modified 2026-10-08 Official page ↗
Status
Analyzed
Published
2025-10-12
Last modified
2026-10-08
Assigner
[email protected]
CVSS 3.1 ([email protected])
3.5 LOW — CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Weaknesses
CWE-602

Description

IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to delete reviews from other users due to client-side enforcement of server-side security.

Affected configurations

• ibm engineering requirements management doors next 7.0.2 • ibm engineering requirements management doors next 7.0.3 • ibm engineering requirements management doors next 7.1

Related

Weakness · CWE (1)

  • CWE-602 Client-Side Enforcement of Server-Side Security weakness

References