IBM Engineering Requirements Management DOORS Next File Disclosure (7294385)

The version of IBM Engineering Requirements Management DOORS Next installed on the remote host is 7.1.0 prior to 7.1.0 iFix 13 or 7.2.0 prior to 7.2.0 iFix 05. It is, therefore, affected by a vulnerability as referenced in the 7294385 advisory. - IBM Engineering Requirements Management DOORS Next...

CVE-2024-41786

IBM Engineering Requirements Management DOORS Next 7.1, and 7.2 could allow a remote attacker to force the Web server to return contents of a sensitive requested file due to improper input validation...

EUVD-2024-55842

IBM Engineering Requirements Management DOORS Next 7.1, and 7.2 could allow a remote attacker to force the Web server to return contents of a sensitive requested file due to improper input validation...

CVE-2024-41786 IBM Engineering Requirements Management DOORS Next for J2EE File Disclosure Rule

IBM Engineering Requirements Management DOORS Next 7.1, and 7.2 could allow a remote attacker to force the Web server to return contents of a sensitive requested file due to improper input validation...

CVE-2024-41786

The IBM Engineering Requirements Management DOORS Next software versions 7.1 and 7.2 are vulnerable to a file disclosure flaw. The root cause is improper input validation during server-side forward/include operations, which may allow a remote attacker to force the Web server to return contents of...

PT-2026-140014

IBM Engineering Requirements Management DOORS Next 7.1, and 7.2 could allow a remote attacker to force the Web server to return contents of a sensitive requested file due to improper input validation...

CVE-2024-41786: IBM Engineering Requirements Management DOORS Next: IBM Engineering Requirements Management DOORS Next 7.1, and 7.2 could allow a remote attacker to force the Web server…

IBM Engineering Requirements Management DOORS Next 7.1, and 7.2 could allow a remote attacker to force the Web server to return contents of a sensitive requested file due to improper input validation...

Security Bulletin: IBM Engineering Requirements Management DOORS Next for J2EE File Disclosure Rule (CVE-2024-41786)

Summary IBM Engineering Requirements Management DOORS Next could allow an attacker to access sensitive files and application resources due to improper validation of user-controlled input in server-side forward/include operations. An attacker could exploit this vulnerability to view configuration...

SmartBear Collaborator Server 15.1.15101 - Path Traversal (Zip-Slip) in the DOOR — Detect

Fingerprint / reachability check for SmartBear Collaborator Server 15.1.15101 - Path Traversal Zip-Slip in the DOORS/Simulink Review-File Upload Leading to Groovy Server Page Execution CWE-22 !/usr/bin/env python3 -- coding: utf-8 -- """Detection for SmartBear Collaborator Server 15.1.15101 - Pat...

SmartBear Collaborator DOORS review upload Zip-Slip GSP RCE

Authenticated JSON login + DOORS review archive upload; Zip-Slip drops Groovy server page under Tomcat ROOT. """SmartBear Collaborator DOORS review Zip-Slip Groovy GSP RCE.""" from future import annotations import io import json import uuid import zipfile from kittysploit import from...

SmartBear Collaborator Server 15.1.15101 DOORS Upload Path Traversal

SmartBear Collaborator Server version 15.1.15101 contains a post-authentication ZIP path traversal in DOORS review-file uploads that can write a Groovy Server Page into the webroot, leading to command execution. https://packetstorm.news/download/235398...

Security Bulletin: IBM Engineering Lifecycle Management products using IBM WebSphere Application Server Liberty is affected by an authenication bypass (CVE-2026-14525)

Summary IBM WebSphere Application Server Liberty is affected by an authenication bypass when the rtcomm-1.0 or rtcommGateway-1.0 feature is enabled. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products|...

EUVD-2024-55717

IBM DOORS Next 7.0.3 through 7.0.3 Interim Fix 018 could allow an authenticated user to bypass security logic to perform unauthorized activities...

CVE-2024-27253

IBM DOORS Next 7.0.3 through 7.0.3 Interim Fix 018 could allow an authenticated user to bypass security logic to perform unauthorized activities...

CVE-2024-27253 IBM Engineering Requirements Management DOORS Next is impacted by vulnerability in Reviews delete request

IBM DOORS Next 7.0.3 through 7.0.3 Interim Fix 018 could allow an authenticated user to bypass security logic to perform unauthorized activities...

CVE-2024-27253 IBM Engineering Requirements Management DOORS Next is impacted by vulnerability in Reviews delete request

IBM DOORS Next 7.0.3 through 7.0.3 Interim Fix 018 could allow an authenticated user to bypass security logic to perform unauthorized activities...

CVE-2024-27253

IBM DOORS Next 7.0.3 through 7.0.3 Interim Fix 018 could allow an authenticated user to bypass security logic to perform unauthorized activities...

CVE-2024-27253

CVE-2024-27253 affects IBM Engineering Requirements Management DOORS Next, version 7.0.3 (including 7.0.3 Interim Fix 018). An authenticated user could bypass security logic and perform unauthorized activities. Remediation: upgrade to iFix019 or later for DOORS Next 7.0.3, or upgrade to the lates...

PT-2026-71352

Name of the Vulnerable Software and Affected Versions IBM DOORS Next versions 7.0.3 through 7.0.3 Interim Fix 018 Description An authenticated user can bypass security logic to perform unauthorized activities. Recommendations Update IBM DOORS Next to a version later than 7.0.3 Interim Fix 018...

CVE-2024-27253: Improper Authentication

IBM DOORS Next 7.0.3 through 7.0.3 Interim Fix 018 could allow an authenticated user to bypass security logic to perform unauthorized activities...