CVE-2024-25039: CWE-400 Uncontrolled Resource Consumption in IBM Engineering Requirements Management DOORS and DOORS Web Access
IBM Engineering Requirements Management DOORS and DOORS Web Access versions 9.7.2.1 through 9.7.2.11 and 9.6.1.1 through 9.6.1.13 are vulnerable to an uncontrolled resource consumption issue. The software does not limit the length of a connection, which could allow a Slowloris HTTP denial of service attack. This attack can cause the web server to become unresponsive, impacting availability.
AI Analysis
Technical Summary
CVE-2024-25039 is a vulnerability in IBM Engineering Requirements Management DOORS and DOORS Web Access where the affected versions do not impose limits on connection length. This flaw enables a Slowloris-style HTTP denial of service attack that exhausts server resources by holding connections open for extended periods, leading to unresponsiveness of the web server. The vulnerability affects versions 9.7.2.1 through 9.7.2.11 and 9.6.1.1 through 9.6.1.13. No official remediation or patch information is currently available.
Potential Impact
An attacker can exploit this vulnerability to cause a denial of service by exhausting server resources, making the web server unresponsive. There is no impact on confidentiality or integrity reported. The primary impact is on availability.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider implementing network-level protections such as rate limiting or connection timeouts to mitigate Slowloris-style attacks.
CVE-2024-25039: CWE-400 Uncontrolled Resource Consumption in IBM Engineering Requirements Management DOORS and DOORS Web Access
Description
IBM Engineering Requirements Management DOORS and DOORS Web Access versions 9.7.2.1 through 9.7.2.11 and 9.6.1.1 through 9.6.1.13 are vulnerable to an uncontrolled resource consumption issue. The software does not limit the length of a connection, which could allow a Slowloris HTTP denial of service attack. This attack can cause the web server to become unresponsive, impacting availability.
CVSS v3.1
Score 7.5high
Affected software
IBM
Engineering Requirements Management DOORS and DOORS Web Access
cpe:2.3:a:ibm:engineering_requirements_management_doors_and_doors_web_access:9.7.2.1:*:*:*:*:*:*:*cpe:2.3:a:ibm:engineering_requirements_management_doors_and_doors_web_access:9.7.2.11:*:*:*:*:*:*:*cpe:2.3:a:ibm:engineering_requirements_management_doors_and_doors_web_access:9.6.1.1:*:*:*:*:*:*:*cpe:2.3:a:ibm:engineering_requirements_management_doors_and_doors_web_access:9.6.1.13:*:*:*:*:*:*:*Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2024-25039 is a vulnerability in IBM Engineering Requirements Management DOORS and DOORS Web Access where the affected versions do not impose limits on connection length. This flaw enables a Slowloris-style HTTP denial of service attack that exhausts server resources by holding connections open for extended periods, leading to unresponsiveness of the web server. The vulnerability affects versions 9.7.2.1 through 9.7.2.11 and 9.6.1.1 through 9.6.1.13. No official remediation or patch information is currently available.
Potential Impact
An attacker can exploit this vulnerability to cause a denial of service by exhausting server resources, making the web server unresponsive. There is no impact on confidentiality or integrity reported. The primary impact is on availability.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider implementing network-level protections such as rate limiting or connection timeouts to mitigate Slowloris-style attacks.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- ibm
- Date Reserved
- 2024-02-03T14:49:24.713Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6a6b96989c2644c7f87cc2fd
Added to database: 07/30/2026, 18:23:20 UTC
Last enriched: 08/07/2026, 14:31:00 UTC
Last updated: 09/12/2026, 10:01:25 UTC
Views: 74
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.