IBM API Connect versions 12.1.0.0 through 12.1.1.2 contain an authorization vulnerability where tenant context verification is insufficient. This flaw allows an authenticated attacker to potentially access resources belonging to other tenants without proper authorization.