Threats tagged 'ghsa-c724-2qgg-vppr'

IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 contain a vulnerability that allows a remote authenticated attacker to modify object attributes improperly. This flaw enables an attacker to change access-related settings that should be system-controlled, potentially exposing sensitive information. The vulnerability is identified as CWE-915 and carries a critical severity with a CVSS score of 9.6.