Skip to content
CVSS 10.0CVSS 10.0 · CRITICAL

CVE-2024-27253Authentication bypass in IBM DOORS Next

IBM DOORS Next 7.0.3 through 7.0.3 Interim Fix 018 could allow an authenticated user to bypass security logic to perform unauthorized activities.

View on NVD

Analysis

Esta vulnerabilidad en IBM DOORS Next permite que un usuario autenticado evada la lógica de seguridad para realizar actividades no autorizadas dentro del sistema. Con una puntuación máxima de 10.0, este fallo compromete seriamente la integridad de la gestión de requisitos en el ciclo de vida de desarrollo. Se recomienda actualizar a las versiones con parches de IBM para mitigar el riesgo de acceso no autorizado.

Relevant roles

BackendCyberSecurityQaTestingJava

Severity

Score: 10.0(CRITICAL)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
AV: NETWORK
AC: LOW
PR: NONE
UI: NONE
S: CHANGED
C: HIGH
I: HIGH
A: HIGH
Weakness (CWE): CWE-287

EPSS

No EPSS score yet (CVE may be too fresh).

Technical description

IBM DOORS Next 7.0.3 through 7.0.3 Interim Fix 018 could allow an authenticated user to bypass security logic to perform unauthorized activities.

Published: 8/12/2026, 10:17:13 PM
Last modified: 8/12/2026, 10:17:13 PM

References

HomeEventsBlogResourcesCoursesTeam