IBM API Connect versions 12.1.0.0 through 12.1.1.2 contain a vulnerability where improper certificate validation could allow a remote authenticated attacker to bypass authentication. The certificate check is not reliably performed in all cases, potentially permitting unauthorized connections.