The vulnerability in IBM Engineering Requirements Management DOORS and DOORS Web Access arises from the lack of limits on connection length, enabling an attacker to perform a Slowloris HTTP denial of service attack. This attack method can exhaust server resources by holding many connections open, leading to the web server becoming unresponsive. The affected versions explicitly include 9.7.2.1 through 9.7.2.11 and 9.6.1.1 through 9.6.1.13. No official patch or remediation level has been published by IBM as of the data provided.

Successful exploitation results in denial of service by making the web server unresponsive, impacting availability. There is no confidentiality or integrity impact reported. The attack requires network access and no privileges or user interaction are needed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider implementing network-level protections such as rate limiting, connection timeouts, or web application firewalls that can detect and mitigate Slowloris-style attacks. Monitor IBM advisories for updates on official patches or mitigations.