Threats tagged 'ghsa-2cjx-f474-h68w'

IBM API Connect versions 12.1.0.0 through 12.1.1.2 contain an authorization vulnerability that allows a remote authenticated attacker to modify tool configuration and cause denial of service. The flaw arises because the system improperly relies on client-supplied information to determine user permissions, enabling unauthorized configuration changes that disrupt service.