Threats tagged 'ghsa-33f5-gwm5-4wrm'

IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 contain a vulnerability where improper verification of a cryptographic signature allows an attacker to gain unauthorized access to an organization. Specifically, a token can be accepted without its signature being fully verified, enabling an attacker to join an organization without a valid invitation.