Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

IBM Engineering Requirements Management DOORS Next Files Can Be Downloaded Remotely

CVE-2024-41770 · published 1 year ago
Summary

A security issue in IBM Engineering Requirements Management DOORS Next could allow unauthorized access to sensitive information. This could happen if a remote attacker takes advantage of a weakness in the application. To fix this, update to a version that has the issue addressed or apply a patch if available.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
ibm engineering_requirements_management_doors_next 7.0.2
7.0.3
7.1
cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.0.2:*:*:*:*:*:*:*
Original advisory text
IBM Engineering Requirements Management DOORS Next 7.0.2, 7.0.3, and 7.1 could allow a remote attacker to download temporary files which could expose application logic or other sensitive information.
IBM Engineering Requirements Management DOORS Next 7.0.2, 7.0.3, and 7.1 could allow a remote attacker to download temporary files which could expose application logic or other sensitive information.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
7.5 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-522Insufficiently Protected Credentials
Timeline
Published3 Mar 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2024-41770 · NVD
Track software like this
Free during beta