Vulnerability Intelligence Report
IBM Engineering Requirements Management DOORS Next is impacted by vulnerability in Reviews delete request
CVE-2024-27253
IBM DOORS Next 7.0.3 through 7.0.3 Interim Fix 018 could allow an authenticated user to bypass security logic to perform unauthorized activities.
Authentication Bypass
No Active Exploit Signals
CVSS Base Score
10.0
CRITICAL
Exploitability:3.9
Impact Score:6.1
EPSS Probability:0.32%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-287 ↗CWE-287 Improper Authentication
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| IBM | DOORS Next | 7.0.3 <= 7.0.3 Interim Fix 018 (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | IBM Corporation · Vendor · USA |
| Reserved | 2024-02-22T01:26:15 |
| Published | 2026-08-12T21:23:03 |
| Last Updated | 2026-08-13T19:26:28 |
Community Chatter & Buzz