IBM Engineering Requirements Management DOORS Next Missing Authorization Vulnerability Allowing Unauthorized Data Access and Modification

A vulnerability exists in IBM Engineering Requirements Management DOORS Next versions 7.1 and 7.2, allowing authenticated users to access and edit data beyond their authorized permissions. This issue arises from inadequate enforcement of authorization, potentially leading to unauthorized access to sensitive project artifacts and impacting data confidentiality and integrity.

Impact

Exploitation of this vulnerability could result in unauthorized access to and modification of restricted project data, compromising the confidentiality and integrity of that information.

Remediation

Users of IBM Engineering Requirements Management DOORS Next 7.1 should install iFix 08 or newer. Users of version 7.2 should install iFix 01 or newer.