CVE-2024-25039

Name of the Vulnerable Software and Affected Versions IBM Engineering Requirements Management DOORS and DOORS Web Access versions 9.7.2.1 through 9.7.2.11 IBM Engineering Requirements Management DOORS and DOORS Web Access versions 9.6.1.1 through 9.6.1.13

Description Failure to limit connection length allows for a Slowloris HTTP denial of service attack, which can cause the web server to become unresponsive. Slowloris is a type of attack that keeps many connections to the target web server open and holds them open as long as possible by sending partial HTTP requests.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.