CVE-2024-41787CWE-367

IBM Engineering Requirements Management DOORS Next code execution

Critical · published January 10, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
65.5
In the wild
Unconfirmed
What it is

🚨 A sneaky race condition in IBM Engineering Requirements Management DOORS Next 7.0.2 and 7.0.3 lets crafty attackers slip through security like greased lightning! 🔥 Think of it as a busy restaurant where two diners are trying to order the last piece of cake at the same time. If the staff doesn't handle the orders carefully, both could believe they got it, leading to a cake disaster! With this vulnerability, an attacker could send a specially crafted request and execute malicious code on your system—essentially taking control as if they had the chef's hat! The consequences could range from data theft to complete system compromise, which is absolutely devastating.

Put simply

Think of it as a busy restaurant where two diners are trying to order the last piece of cake at the same time. If the staff doesn't handle the orders carefully, both could believe they got it, leading to a cake disaster! This vulnerability arises from a race condition that allows a remote attacker to bypass security restrictions, executing code in the application simply by manipulating requests.

What to do

With this vulnerability, an attacker could send a specially crafted request and execute malicious code on your system—essentially taking control as if they had the chef's hat! The consequences could range from data theft to complete system compromise, which is absolutely devastating. To safeguard your systems, immediately update to the latest version of IBM Engineering Requirements Management DOORS. Additionally, review your system's configurations to ensure no unauthorized access points are left open. Don't wait—act now! You've got this! With a quick update and a few checks, you'll turn this vulnerability into history. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01105 · 65.5th percentile
Weakness
CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition
Published
2025-01-10T13:18Z
EPSS history
Timeline
  • 10 JAN 13:18Z
    IBM Engineering Requirements Management DOORS Next code execution
    cvelistv5