Düşük CVSS 3.5
CVE-2025-2138: Engineering Requirements Management Doors Next: güvenlik açığı
Açıklama (NVD)
IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to delete comments from other users due to client-side enforcement of server-side security.
Özet bilgiler
- Ürün
- Ibm Engineering Requirements Management Doors Next
- CVSS v3.1
- 3.5
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N - EPSS
- %0,19 (yüzdelik 8)
- CWE
- CWE-602
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| ibm-engineering-requirements-management-doors-next | 7.0.2 | 7.0.2 | — |
| ibm-engineering-requirements-management-doors-next | 7.0.3 | 7.0.3 | — |
| ibm-engineering-requirements-management-doors-next | 7.1 | 7.1 | — |