CVE-2025-2139CWE-602

CVE-2025-2139

Low · published October 12, 2025

CVSS v3.1
3.5
EPSS
0%
Percentile
7.4
In the wild
Unconfirmed
What it is

IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to delete reviews from other users due to client-side enforcement of server-side security.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00182 · 7.4th percentile
Weakness
CWE-602 · Client-Side Enforcement of Server-Side Security
Published
2025-10-12T18:15Z
Affected products (3)
ProductVersionsFixed in
ibm/engineering_requirements_management_doors_nextall versions—
ibm/engineering_requirements_management_doors_nextall versions—
ibm/engineering_requirements_management_doors_nextall versions—
References (1)
https://www.ibm.com/support/pages/node/7247716 · [email protected]
EPSS history
Timeline
  • 12 OCT 13:35Z
    IBM Engineering Requirements Management Doors Next security bypass
    cvelistv5