Threats tagged 'ghsa-gjvr-rq33-8vjx'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.8	CVE-2026-16720IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain valid Critical9.82026-11-07GCVE DatabaseCVE-2026-16720 IBM API Connect versions 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 contain a critical vulnerability that allows remote attackers to obtain valid access tokens for other users. This occurs because authentication against a connected directory service is not sufficiently enforced, enabling attackers to assume another user's identity. Report on CVE-2026-16720 Vulnerability CWE-287 #ghsa-gjvr-rq33-8vjx	GCVE Database	2026-11-07

Page 1 of 1