CVE-2017-1545 Hardcoded credentials in Rational DOORS
An attacker with physical access can log into IBM Doors Web Access using previously stored credentials, leading to unauthorized account access.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-1545?
CVE-2017-1545 is a medium-severity vulnerability in IBM Rational DOORS, published on 26 Jan 2018. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
IBM Doors Web Access 9.5 and 9.6 could allow an attacker with physical access to the system to log into the application using previously stored credentials. IBM X-Force ID: 130914.
Which versions are affected by CVE-2017-1545?
It affects 1 product.
Products include Ibm Engineering Requirements Management Doors.
How do I fix CVE-2017-1545?
No fix has been published for CVE-2017-1545 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-1545 being exploited?
There is no known exploitation of CVE-2017-1545 in the wild and no public exploit code.
Other vulnerabilities in IBM Rational DOORS
- CVE-2018-1457 Privilege escalation in Rational DOORS
- CVE-2023-50304 IBM Engineering Requirements Management DOORS XML external entity injection
- CVE-2023-28949 IBM Engineering Requirements Management cross-site request forgery
- CVE-2024-43190 IBM Engineering Requirements Management DOORS weak authentication
- CVE-2017-1516 Other in Rational DOORS
Sources
Also known as GHSA-3v37-7hj4-mq66.