CVE-2025-2139 — Client-Side Enforcement of Server-Side Security in IBM Engineering Requirements Management Doors Next

CWE-602 — Client-Side Enforcement of Server-Side Security3 documents3 sources
Severity
3.5LOWNVD
EPSS
0.0%
top 87.36%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Engineering Requirements Management Doors Next
Timeline
PublishedOct 12

Description

IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to delete reviews from other users due to client-side enforcement of server-side security.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:NExploitability: 2.1 | Impact: 1.4

Affected Packages2 packages

🔴Vulnerability Details

2
CVEList
IBM Engineering Requirements Management Doors Next security bypass↗2025-10-12
▶
GHSA
GHSA-7hjr-33rg-rx3j: IBM Engineering Requirements Management Doors Next 7↗2025-10-12
▶
CVE-2025-2139 — IBM vulnerability | cvebase