IBM Engineering Requirements Management DOORS Next Email Spoofing Vulnerability

An email spoofing vulnerability has been identified in IBM Engineering Requirements Management DOORS Next versions 7.0.2, 7.0.3, and 7.1. This vulnerability allows an authenticated user on the network to impersonate the email identity of the sender, due to inadequate verification of source data.

Impact

Exploitation of this vulnerability could lead to unauthorized email identity spoofing, allowing for potential misrepresentation in communications.

Remediation

Users of IBM Engineering Requirements Management DOORS Next 7.0.2 should install iFix 36. Users of version 7.0.3 should install iFix 19 or newer. For version 7.1.0, iFix 05 or newer should be installed.