← Back

CVE-2024-43190

nvd nist
Published: Jul 7, 2025Modified: Jun 17, 2026

JSON object

Loading...
5.9
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 2.2 / Impact: 3.6
Source: psirt@us.ibm.com (Secondary)

Description

IBM Engineering Requirements Management DOORS 9.7.2.9, under certain configurations, could allow a remote attacker to obtain password reset instructions of a legitimate user using man in the middle techniques.

Affected (4)

Ibm
2 products
Engineering Requirements Management Doors
Engineering Requirements Management Doors Web Access
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Ibm
Engineering Requirements Management Doors
From 9.6 to 9.6.1.13
Engineering Requirements Management Doors
Version 9.7.2.9
Ibm
Engineering Requirements Management Doors Web Access
From 9.6 to 9.6.1.13
Engineering Requirements Management Doors Web Access
Version 9.7.2.9

Related CWEs

CWE-640
Weak Password Recovery Mechanism for Forgotten Password
The product contains a mechanism for users to recover or change their passwords without knowing the original password, but the mechanism is weak.

References (1)

Source: psirt@us.ibm.com
Vendor Advisory

Timeline

No history available yet.