Threats tagged 'ghsa-m3x9-mvwf-ch89'

IBM API Connect versions 12.1.0.0 through 12.1.1.2 contain a vulnerability that allows a remote authenticated attacker to probe internal network services due to improper validation of a user-supplied URL. This flaw could enable attackers with valid credentials to gather information about internal network services, potentially aiding further attacks. The vulnerability has a medium severity rating with a CVSS score of 5. No patch or remediation details are currently provided.