PT-2025-41721 · Ibm · Ibm Engineering Requirements Management Doors Next

Published 2025-10-12 · Updated 2025-10-16 · CVE-2025-2139

Positive Technologies (AI Summary)

CVSS v3.1

3.5

Low

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions IBM Engineering Requirements Management Doors Next versions 7.0.2 through 7.1

Description An authenticated user on the network may be able to delete reviews belonging to other users. This is due to client-side enforcement of what should be server-side security measures.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Fix

Weakness Enumeration

CWE-602

Related Identifiers

CVE-2025-2139

Affected Products

Ibm Engineering Requirements Management Doors Next

References · 7

• https://osv.dev/vulnerability/CVE-2025-2139 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-2139 · Security Note
• https://twitter.com/CVEnew/status/1977371315188162826 · Twitter Post
• https://t.me/cveNotify/138948 · Telegram Post
• https://ibm.com/support/pages/node/7247716 · Patch, Vendor Advisory
• https://t.me/cveNotify/138383 · Telegram Post
• https://t.me/CVEtracker/34712 · Telegram Post