CVE-2024-25039

IBM Engineering Requirements Management DOORS and DOORS Web Access 9.7.2.1 through 9.7.2.11, and 9.6.1.1 through 9.6.1.13 do not limit the length of a connection which could allow for a Slowloris HTTP denial of service attack to take place. This can cause the web server to become unresponsive.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.ibm.com/support/pages/node/7279145	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ibm:engineering_requirements_management_doors_web_access::::::::
	cpe:2.3:a:ibm:engineering_requirements_management_doors_web_access::::::::

History

02 Oct 2026, 00:10

Type	Values Removed	Values Added
Summary		(es) IBM Engineering Requirements Management DOORS y DOORS Web Access 9.7.2.1 hasta 9.7.2.11, y 9.6.1.1 hasta 9.6.1.13 no limitan la longitud de una conexión, lo que podría permitir que se produzca un ataque de denegación de servicio HTTP Slowloris. Esto puede hacer que el servidor web deje de responder.

Information

Published : 2026-07-30 19:16

Updated : 2026-10-02 00:10

NVD link : CVE-2024-25039

Mitre link : CVE-2024-25039

CVE.ORG link : CVE-2024-25039

JSON object : View

Products Affected

ibm

engineering_requirements_management_doors_web_access

CWE

CWE-400

Uncontrolled Resource Consumption

{"id": "CVE-2024-25039", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-25039", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-31T23:04:58.238407Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@us.ibm.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "affected": [{"source": "psirt@us.ibm.com", "affectedData": [{"cpes": ["cpe:2.3:a:ibm:engineering_requirements_management_doors_and_doors_web_access:9.7.2.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:engineering_requirements_management_doors_and_doors_web_access:9.7.2.11:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:engineering_requirements_management_doors_and_doors_web_access:9.6.1.1:*:*:*:*:*:*:*", "cpe:2.3:a:ibm:engineering_requirements_management_doors_and_doors_web_access:9.6.1.13:*:*:*:*:*:*:*"], "vendor": "IBM", "product": "Engineering Requirements Management DOORS and DOORS Web Access", "versions": [{"status": "affected", "version": "9.7.2.1", "versionType": "semver", "lessThanOrEqual": "9.7.2.11"}, {"status": "affected", "version": "9.6.1.1", "versionType": "semver", "lessThanOrEqual": "9.6.1.13"}]}]}], "published": "2026-07-30T19:16:56.507", "references": [{"url": "https://www.ibm.com/support/pages/node/7279145", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@us.ibm.com", "description": [{"lang": "en", "value": "CWE-400"}]}], "descriptions": [{"lang": "en", "value": "IBM Engineering Requirements Management DOORS and DOORS Web Access 9.7.2.1 through 9.7.2.11, and 9.6.1.1 through 9.6.1.13 do not limit the length of a connection which could allow for a Slowloris HTTP denial of service attack to take place. This can cause the web server to become unresponsive."}, {"lang": "es", "value": "IBM Engineering Requirements Management DOORS y DOORS Web Access 9.7.2.1 hasta 9.7.2.11, y 9.6.1.1 hasta 9.6.1.13 no limitan la longitud de una conexi\u00f3n, lo que podr\u00eda permitir que se produzca un ataque de denegaci\u00f3n de servicio HTTP Slowloris. Esto puede hacer que el servidor web deje de responder."}], "lastModified": "2026-10-02T00:10:00.180", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:engineering_requirements_management_doors_web_access:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "59FBD7F7-A21E-46FE-90F8-B32F05979D52", "versionEndIncluding": "9.6.1.13", "versionStartIncluding": "9.6.1.1"}, {"criteria": "cpe:2.3:a:ibm:engineering_requirements_management_doors_web_access:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "260321AE-5F20-4385-9B34-AC0531B68980", "versionEndIncluding": "9.7.2.11", "versionStartIncluding": "9.7.2.1"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@us.ibm.com"}