IBM API Connect versions 12.1.0.0 through 12.1.1.2 contain a path traversal vulnerability that could allow a remote attacker with limited privileges to view arbitrary files on the system by sending a specially crafted URL request. This vulnerability does not allow modification or denial of service but exposes potentially sensitive file contents.