PT-2025-41720 · Ibm · Ibm Engineering Requirements Management Doors Next

Published 2025-10-12 · Updated 2025-10-16 · CVE-2025-2138

Positive Technologies (AI Summary)

CVSS v3.1

3.5

Low

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM Engineering Requirements Management Doors Next versions 7.0.2 through 7.1

Description An authenticated user on the network may be able to delete comments from other users. This is due to client-side enforcement of server-side security measures.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Fix

Weakness Enumeration

CWE-602

Related Identifiers

CVE-2025-2138

Affected Products

Ibm Engineering Requirements Management Doors Next

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-2138 · Security Note
• https://osv.dev/vulnerability/CVE-2025-2138 · Vendor Advisory
• https://t.me/cveNotify/138382 · Telegram Post
• https://t.me/CVEtracker/34711 · Telegram Post
• https://ibm.com/support/pages/node/7247716 · Patch, Vendor Advisory
• https://twitter.com/CVEnew/status/1977371314168979527 · Twitter Post
• https://t.me/cveNotify/138939 · Telegram Post