Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c5jf-c5pw-3xhj

Опубликовано: 10 янв. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

IBM Engineering Requirements Management DOORS Next 7.0.2 and 7.0.3 could allow a remote attacker to bypass security restrictions, caused by a race condition. By sending a specially crafted request, an attacker could exploit this vulnerability to remotely execute code.

IBM Engineering Requirements Management DOORS Next 7.0.2 and 7.0.3 could allow a remote attacker to bypass security restrictions, caused by a race condition. By sending a specially crafted request, an attacker could exploit this vulnerability to remotely execute code.

EPSS

Процентиль: 42%
0.00203
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-367

Связанные уязвимости

CVSS3: 9.8
nvd
около 1 года назад

IBM Engineering Requirements Management DOORS Next 7.0.2 and 7.0.3 could allow a remote attacker to bypass security restrictions, caused by a race condition. By sending a specially crafted request, an attacker could exploit this vulnerability to remotely execute code.

CVSS3: 9.8
fstec
больше 1 года назад

Уязвимость программного обеспечения для управления требованиями IBM Engineering Requirements Management DOORS, связанная с ошибками синхронизации при использовании общего ресурса («Ситуация гонки»), позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 42%
0.00203
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-367