IBM DOORS Next versions 7.0.3 through 7.0.3 Interim Fix 018 contain an improper authentication vulnerability (CWE-287) that could allow an authenticated user to bypass security controls and perform unauthorized actions. The vulnerability is rated critical with a CVSS 3.1 base score of 10. The vulnerability affects exactly version 7.0.3. No official remediation level or patch information is currently available from the vendor. The product is not a cloud service, so remediation depends on vendor patch releases.

An authenticated user can bypass security logic, potentially leading to full compromise of confidentiality, integrity, and availability within the affected IBM DOORS Next environment. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and complete impact on confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the IBM vendor advisory for current remediation guidance. Until a fix is released, restrict access to trusted users only and monitor for suspicious activity related to IBM DOORS Next 7.0.3. No official fix or temporary workaround is currently documented.