CVE-2025-2140: IBM Engineering Requirements Management Doors Next spoofing
IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to spoof email identity of the sender due to improper verification of source data.
Other sources
IBM Engineering Requirements Management DOORS Next could allow an authenticated user on the network to spoof email identity of the sender due to improper verification of source data.
— IBM
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
IBM Engineering Requirements Management DOORS Nextto a version that resolves this vulnerability.Patch ifix 36 - Upgrade
Upgrade
IBM Engineering Requirements Management DOORS Nextto a version that resolves this vulnerability.Patch ifix 19 or newer - Upgrade
Upgrade
IBM Engineering Requirements Management DOORS Nextto a version that resolves this vulnerability.Patch ifix 05 or newer
Event History
Frequently Asked Questions
What is the severity of CVE-2025-2140?
CVE-2025-2140 is categorized as a moderate severity vulnerability.
How do I fix CVE-2025-2140?
To fix CVE-2025-2140, you should update IBM Engineering Requirements Management DOORS Next to version 7.1.1 or later.
What is the impact of CVE-2025-2140?
CVE-2025-2140 allows authenticated users to spoof the email identity of the sender due to improper data verification.
Which versions of IBM Engineering Requirements Management DOORS Next are affected by CVE-2025-2140?
CVE-2025-2140 affects versions 7.0.2, 7.0.3, and 7.1 of IBM Engineering Requirements Management DOORS Next.
Is user authentication required to exploit CVE-2025-2140?
Yes, CVE-2025-2140 requires the attacker to be an authenticated user within the network.