Threats tagged 'ghsa-39fj-5g9w-3qcx'

IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 contain an open redirect vulnerability that could allow a remote attacker to perform an account takeover. The vulnerability arises because the redirect address used during sign-in is not sufficiently validated, enabling authentication results to be sent to an attacker-controlled location. This flaw has a critical severity with a CVSS score of 9.6.