IBM API Connect versions 12.1.0.0 through 12.1.1.2 contain a vulnerability that allows a remote attacker to obtain sensitive information by exploiting improper validation of endpoint URLs. This flaw could lead to a critical impact on confidentiality without requiring user interaction or privileges.