Threats tagged 'ghsa-9qq8-rgg9-9qhf'

IBM API Connect versions 12.1.0.0 through 12.1.1.2 contain a vulnerability where improper input validation of locations in service definitions can allow a remote authenticated attacker to access sensitive information. This occurs because the server may retrieve content it should not have access to when importing service definitions.