CVE-2018-1457

An undisclosed vulnerability in IBM Rational DOORS 9.5.1 through 9.6.1.10 application allows an attacker to gain DOORS administrator privileges

High · published June 27, 2018

CVSS v3.0
8.1
EPSS
2%
Percentile
84.5
In the wild
Unconfirmed
What it is

🚨 An unnoticed misstep in IBM Rational DOORS can hand an attacker full admin privileges—talk about a backdoor entry! 🔥 It's like leaving the keys to your entire office in the lobby and trusting everyone to just look but not touch—only one person needs to think, 'Why not?'. If this vulnerability is exploited, an attacker could gain complete administrator access, allowing them to manipulate, delete, or export sensitive data. This could lead to devastating consequences for project integrity and confidentiality, impacting entire teams relying on DOORS for critical requirements management.

Put simply

It's like leaving the keys to your entire office in the lobby and trusting everyone to just look but not touch—only one person needs to think, 'Why not?'. This vulnerability in IBM Rational DOORS, versions 9.5.1 through 9.6.1.10, allows attackers to gain administrator privileges due to an undisclosed flaw, effectively bypassing standard security controls.

What to do

If this vulnerability is exploited, an attacker could gain complete administrator access, allowing them to manipulate, delete, or export sensitive data. This could lead to devastating consequences for project integrity and confidentiality, impacting entire teams relying on DOORS for critical requirements management. Immediate action is required: update your IBM Rational DOORS to the latest version, ensuring you are above 9.6.1.10. Additionally, review your environment for any suspicious behavior or unauthorized access attempts since the vulnerability could allow serious exploitation. You've got this! Stay proactive, patch up, and keep your systems secure! 🛡️

The record
Technical detail
CVSS v3.0
8.1 · HIGH
Vector
CVSS:3.0/A:H/AC:H/AV:N/C:H/I:H/PR:N/S:U/UI:N/E:U/RC:C/RL:O
CVSS v4.0
Not supplied
EPSS
0.02488 · 84.5th percentile
Published
2018-06-27T18:00Z
EPSS history
Timeline
  • 27 JUN 18:00Z
    An undisclosed vulnerability in IBM Rational DOORS 9.5.1 through 9.6.1.10 application allows an attacker to gain DOORS administrator privileges
    cvelistv5