Threats tagged 'ghsa-7524-6fjx-c5w6'

IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 contain a vulnerability where a remote authenticated attacker could create unauthorized user accounts. This occurs due to improper verification of cryptographic signatures, allowing forged identity data from a login provider to be accepted without full signature validation.