| Package | Affected versions | Patched versions |
|---|---|---|
| engineering requirements management doors | = 9.7.2.9≥ 9.6, ≤ 9.6.1.13 | |
| engineering requirements management doors web access | = 9.7.2.9≥ 9.6, ≤ 9.6.1.13 |
IBM Engineering Requirements Management DOORS 9.7.2.9, under certain configurations, could allow a remote attacker to obtain password reset instructions of a legitimate user using man in the middle techniques.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free