Threats tagged 'ghsa-3mvj-682g-p7pp'

IBM API Connect versions 12.1.0.0 through 12.1.1.2 contain an authorization vulnerability that could allow a remote attacker to create, modify, or delete tenants without proper permissions. This flaw arises from missing authorization checks.