IBM API Connect versions 12.1.0.0 through 12.1.1.2 contain a vulnerability where improper use of cryptography weakens the encryption protecting stored data. This flaw could allow a local attacker to obtain sensitive information. The vulnerability does not affect integrity or availability and requires local access with low attack complexity and no privileges.