CVE-2024-27253

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2024-27253", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2024-02-22T01:26:15.968Z", "datePublished": "2026-08-12T21:23:03.460Z", "dateUpdated": "2026-08-13T19:26:28.054Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-08-12T21:23:03.460Z"}, "title": "IBM Engineering Requirements Management DOORS Next is impacted by vulnerability in Reviews delete request", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-287", "description": "CWE-287 Improper Authentication", "type": "CWE"}]}], "affected": [{"vendor": "IBM", "product": "DOORS Next", "versions": [{"status": "affected", "version": "7.0.3", "lessThanOrEqual": "7.0.3 Interim Fix 018", "versionType": "semver"}], "cpes": ["cpe:2.3:a:ibm:doors_next:7.0.3:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:doors_next:7.0.3:interim_fix_018:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "IBM DOORS Next 7.0.3 through 7.0.3 Interim Fix 018 could allow an authenticated user to bypass security logic to perform unauthorized activities.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM DOORS Next 7.0.3 through 7.0.3 Interim Fix 018 could allow an authenticated user to bypass security logic to perform unauthorized activities.</p>"}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7282705", "tags": ["vendor-advisory", "patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "CRITICAL", "baseScore": 10, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"}}], "solutions": [{"lang": "en", "value": "IBM strongly recommends addressing the vulnerability now by upgrading to iFixes detailed below:\n\n\n\nIBM recommends customers on ELM 7.0.1, 7.0.2 or any version below 7.0.3 to upgrade your products to Maintenance release 7.0.3 and apply below fix.\n\n\n\nOptionally, upgrade to the latest 7.2.0 version.\n\nAffected Product(s)Version(s)Remediation/Fix/Instructions\n\nIBM Engineering Requirements Management DOORS Next\n\n7.0.3Download and install\u00a0 iFix019 https://www.ibm.com/support/fixcentral/swg/downloadFixes \u00a0or later", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>IBM strongly recommends addressing the vulnerability now by upgrading to iFixes detailed below:</p><p>IBM recommends customers on ELM 7.0.1, 7.0.2 or any version below 7.0.3 to upgrade your products to Maintenance release 7.0.3 and apply below fix.</p><p>Optionally, upgrade to the latest 7.2.0 version.</p><div><table><tbody><tr><td><strong>Affected Product(s)</strong></td><td><strong>Version(s)</strong></td><td><strong>Remediation/Fix/Instructions</strong></td></tr><tr><td><p>IBM Engineering Requirements Management DOORS Next</p></td><td>7.0.3</td><td>Download and install\u00a0<a href=\"https://www.ibm.com/support/fixcentral/swg/downloadFixes?parent=IBM%20Engineering&amp;product=ibm/Rational/IBM+Engineering+Lifecycle+Management&amp;release=7.0.3&amp;platform=All&amp;function=fixId&amp;fixids=7.0.3-IBM-ELM-iFix019&amp;includeRequisites=1&amp;includeSupersedes=0&amp;downloadMethod=ddp\" rel=\"nofollow\">iFix019</a>\u00a0or later</td></tr></tbody></table></div>"}]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-13T19:22:12.406760Z", "id": "CVE-2024-27253", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-13T19:26:28.054Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"cna": {"title": "IBM Engineering Requirements Management DOORS Next is impacted by vulnerability in Reviews delete request", "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 10, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:ibm:doors_next:7.0.3:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:doors_next:7.0.3:interim_fix_018:*:*:*:*:*:*"], "vendor": "IBM", "product": "DOORS Next", "versions": [{"status": "affected", "version": "7.0.3", "versionType": "semver", "lessThanOrEqual": "7.0.3 Interim Fix 018"}]}], "solutions": [{"lang": "en", "value": "IBM strongly recommends addressing the vulnerability now by upgrading to iFixes detailed below:\n\n\n\nIBM recommends customers on ELM 7.0.1, 7.0.2 or any version below 7.0.3 to upgrade your products to Maintenance release 7.0.3 and apply below fix.\n\n\n\nOptionally, upgrade to the latest 7.2.0 version.\n\nAffected Product(s)Version(s)Remediation/Fix/Instructions\n\nIBM Engineering Requirements Management DOORS Next\n\n7.0.3Download and install\u00a0 iFix019 https://www.ibm.com/support/fixcentral/swg/downloadFixes \u00a0or later", "supportingMedia": [{"type": "text/html", "value": "<p>IBM strongly recommends addressing the vulnerability now by upgrading to iFixes detailed below:</p><p>IBM recommends customers on ELM 7.0.1, 7.0.2 or any version below 7.0.3 to upgrade your products to Maintenance release 7.0.3 and apply below fix.</p><p>Optionally, upgrade to the latest 7.2.0 version.</p><div><table><tbody><tr><td><strong>Affected Product(s)</strong></td><td><strong>Version(s)</strong></td><td><strong>Remediation/Fix/Instructions</strong></td></tr><tr><td><p>IBM Engineering Requirements Management DOORS Next</p></td><td>7.0.3</td><td>Download and install\u00a0<a href=\"https://www.ibm.com/support/fixcentral/swg/downloadFixes?parent=IBM%20Engineering&amp;product=ibm/Rational/IBM+Engineering+Lifecycle+Management&amp;release=7.0.3&amp;platform=All&amp;function=fixId&amp;fixids=7.0.3-IBM-ELM-iFix019&amp;includeRequisites=1&amp;includeSupersedes=0&amp;downloadMethod=ddp\" rel=\"nofollow\">iFix019</a>\u00a0or later</td></tr></tbody></table></div>", "base64": false}]}], "references": [{"url": "https://www.ibm.com/support/pages/node/7282705", "tags": ["vendor-advisory", "patch"]}], "descriptions": [{"lang": "en", "value": "IBM DOORS Next 7.0.3 through 7.0.3 Interim Fix 018 could allow an authenticated user to bypass security logic to perform unauthorized activities.", "supportingMedia": [{"type": "text/html", "value": "<p>IBM DOORS Next 7.0.3 through 7.0.3 Interim Fix 018 could allow an authenticated user to bypass security logic to perform unauthorized activities.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-287", "description": "CWE-287 Improper Authentication"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2026-08-12T21:23:03.460Z"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-27253", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-08-13T19:22:12.406760Z"}}}], "providerMetadata": {"shortName": "CISA-ADP", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "dateUpdated": "2026-08-13T19:22:35.939Z"}}]}, "cveMetadata": {"cveId": "CVE-2024-27253", "state": "PUBLISHED", "dateUpdated": "2026-08-12T21:23:03.460Z", "dateReserved": "2024-02-22T01:26:15.968Z", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "datePublished": "2026-08-12T21:23:03.460Z", "assignerShortName": "ibm"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:ibm:doors_next:7.0.3:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:doors_next:7.0.3:interim_fix_018:*:*:*:*:*:*"], "product": "DOORS Next", "vendor": "IBM", "versions": [{"lessThanOrEqual": "7.0.3 Interim Fix 018", "status": "affected", "version": "7.0.3", "versionType": "semver"}]}], "source": "psirt@us.ibm.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM DOORS Next 7.0.3 through 7.0.3 Interim Fix 018 could allow an authenticated user to bypass security logic to perform unauthorized activities."}, {"lang": "es", "value": "IBM DOORS Next 7.0.3 hasta 7.0.3 Interim Fix 018 podr\u00eda permitir a un usuario autenticado eludir la l\u00f3gica de seguridad para realizar actividades no autorizadas."}], "id": "CVE-2024-27253", "lastModified": "2026-09-23T13:10:00.153", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 10.0, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 6.0, "source": "psirt@us.ibm.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-27253", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-08-13T19:22:12.406760Z", "version": "2.0.3"}}]}, "published": "2026-08-12T22:17:13.600", "references": [{"source": "psirt@us.ibm.com", "url": "https://www.ibm.com/support/pages/node/7282705"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-287"}], "source": "psirt@us.ibm.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[7.0.3,7.0.3 Interim Fix 018]"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "DOORS Next", "source": "cna", "vendor": "IBM"}, "product": "doors_next", "vendor": "ibm"}], "created": "2026-08-12T23:45:02.923876+00:00", "updated": "2026-08-13T02:00:13.143173+00:00", "vendors": ["ibm", "ibm$PRODUCT$doors_next"]}