Threats tagged 'ghsa-7q3f-q99h-8m95'

IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 contain an LDAP injection vulnerability. This flaw allows a remote attacker to manipulate LDAP directory queries by injecting malicious input that is not properly neutralized. As a result, the attacker could retrieve sensitive information from the connected LDAP directory. The vulnerability has a medium severity rating with a CVSS score of 5.3.